The ISSM is the person responsible for ensuring the security of enterprise wide Information Systems throughout there life cycles, from design phase through disposal.