Exam 712-50 topic 1 question 195 discussion

The business stakeholder accountable for the integrity of a new information system is typically the Chief Information Security Officer (CISO). The CISO is responsible for ensuring that the information security measures, including controls and processes, are adequately implemented to protect the integrity, confidentiality, and availability of the system. This includes overseeing the development, implementation, and maintenance of security policies and procedures, conducting risk assessments, and ensuring compliance with relevant standards and regulations. According to NIST Special Publication 800-53, the CISO plays a crucial role in managing the security and privacy controls for information systems and ensuring these controls are effective throughout the system development life cycle. The CISO's responsibilities encompass the establishment and maintenance of an organization's overall security posture, which directly includes the integrity of new information systems.

I would have thought the system owner would be accountable, the CISO's role is to advise the business owner, but the business owners are accountable for taking the action to protect the system and it is their choice to release it.