What MUST each information owner do when a system contains data from multiple information owners?

Question

Duc Hai · Accepted Answer

Develop and maintain the System Security Plan (SSP) for the Information System (IS) containing the data

Duc Hai · Answer

Provide input to the Information System (IS) owner regarding the security requirements of the data

Duc Hai · Answer

Review the Security Assessment report (SAR) for the Information System (IS) and authorize the IS to operate.

Duc Hai · Answer

Move the data to an Information System (IS) that does not contain data owned by other information owners

List of questions