The ISSO is the person responsible for ensuring the security of an Information System throughout its life cycle, from design phase through disposal.