What security responsibilities can an agency head delegate to others?
The agency head may delegate all Information Security responsibilities, with the exception of the following: • Designating an Information Security Officer. • Ensuring the implementation an Information Security Program. • Ensuring the implementation an Audit Program. Note: The delegated party must copy the agency head on email submissions to the Chief Information Security Officer.