What is the primary function of the IAM/ISSM?

• A. Establishing, implementing, and maintaining the DON information system
• B. Overseeing physical security
• C. Coordinating naval cryptology
• D. Managing classified disposal

Answer: (A)

IAM/ISSMs are responsible for the security life cycle of a Department of the Navy information system. Their main job is to establish the system, implement its security controls, and maintain it to keep the information system operating securely over time. This includes setting up security policies, ensuring proper documentation and accreditation, and overseeing ongoing protection and risk management for the system.

Physical security falls under facilities and physical safeguard roles, not the information system’s security management. Coordinating naval cryptology is handled by cryptologic organizations focused on encryption and signals intelligence, not the system security management of DoN information systems. Managing classified disposal is about the handling and destruction of classified materials, a separate process from the information system’s security management.