The roles and responsibilities of the ISSO, formerly the IA officer, are established in References DOD Instruction 8500.01, “Cybersecurity,” March 14, 2014 and DOD Instruction 8510.01, “Risk Management Framework (RMF) for DOD Information Technology (IT),” March 12, 2014.

Guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity.

A formally documented plan to create and maintain, for a specific period of time, retrievable exact copies of information.

Collection and evaluation of data, including self-monitoring reports, and verification.

Examination of information to identify the risk to an information system.

Administrative actions, and policies, and procedures to manage the selection, development, implementation, and maintenance of security measures to safeguard electronic Protected Health Information (ePHI) and to manage the conduct of an organization’s workforce in relation to the protection of that information.

Military and civilian full-time and part-time employees, volunteers, trainees, and other persons (including students and contract personnel) whose conduct, in the performance of work for an organization, is under the direct control of such an entity, whether or not they are paid by the organization.

The property that information is not disclosed to system entities (users, processes, devices) unless they have been authorized to access the information.

The process of verifying the identity or other attributes claimed by or assumed of an entity (user, process, or device), or to verify the source and integrity of data.

The system of policies, procedures, and requirements established to protect unclassified information that may be withheld from release to the public under the provisions of policy or statute and those established pursuant to the authority of Executive Order 13526 (Reference (q)) to protect information that, if subjected to unauthorized disclosure, could r...

The attempted or successful unauthorized access, use, disclosure, modification, or destruction of information or interference with system operations in an information system.

The roles and responsibilities of the ISSM, formerly the IA manager, are established in References DOD Instruction 8500.01, “Cybersecurity,” March 14, 2014 and DOD Instruction 8510.01, “Risk Management Framework (RMF) for DOD Information Technology (IT),” March 12, 2014.

Information that is a subset of health information, including demographic information collected from an individual, and: Is created or received by a health care provider, a health plan, or an employer;  

Relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or p...

A plan to safeguard a building’s premises (exterior and interior) from unauthorized physical access, and to safeguard the equipment therein from unauthorized physical access, tampering, and theft.

Care, services, or supplies related to the health of an individual. Health care includes, but is not limited to: Preventive, diagnostic, therapeutic, rehabilitative, maintenance, or palliative care, and counseling, service, assessment, or procedure with respect to the physical or mental condition, or functional status, of an individual, or that affects th...