What is a System Security Officer, System Owner, and Information Owner?
Learn what these essential roles are for your system security plan.

According to the NIST glossary, a system owner is a person or organization having responsibility for the development, procurement, integration, modification, operation, and maintenance, and/or final disposition of an information system.
According to the NIST glossary, an information owner is an official with statutory or operational authority for specified information and responsibility for establishing the controls for its generation, collection, processing, dissemination, and disposal.
According to the NIST glossary, an SSO is an individual with assigned responsibility for maintaining the appropriate operational security posture for an information system or program.
Keep reading
More on NIST SP 800-171 & CMMC Level 2.

IA.L2-3.5.7: Technical How-To: Configure Password Policies on Windows, Linux, and macOS to Enforce Complexity and Character Changes
Step-by-step guidance to configure password complexity and character-change controls on Windows, Linux, and macOS to meet NIST SP 800-171 Rev.2 / CMMC 2.0 Level 2 IA.L2-3.5.7.

AU.L2-3.3.7: Validate and Test Clock Synchronization
Step-by-step guidance to validate, test, and collect audit-ready evidence for clock synchronization to meet NIST SP 800-171 Rev.2 / CMMC 2.0 Level 2 AU.L2-3.3.7 compliance.

CM.L2-3.4.3: Use Version Control and Configuration Management
Practical steps, tools, and small-business examples to track, review, approve, and audit configuration changes to meet NIST SP 800-171 Rev.2 / CMMC 2.0 CM.L2-3.4.3.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo