The System Owner is responsible for the successful operation of the system and accountable for system security. The System Owner is also responsible for executing crucial steps to implement management and operational controls, and to ensure that effective technical controls are implemented to protect the system and its data. The System Owner formally designates the ISSO. In conjunction with the Business Owner, the System Owner is responsible for ensuring that Security Accreditation activities are completed, and that the POA&M is maintained and reported. During the assessment process, the System Owner shall be available for interview and, with the assistance of the system’s support staff, ensure that all documentation required for the assessment is available to the assessment Evaluator. The System Owner may be the Business Owner.
