IT Security Office and the Senior Agency Information Security Officer

Develops and manages the GSA information security program.  Provides the services and expertise across the agency to implement and maintain the information technology security program.  Establishes and promulgates internal security policies, procedures, controls, and guidelines.  Ensures that new vulnerabilities are mitigated in a timely manner.  Manages the annual FISMA assessment process. Conducts continuous monitoring of GSA systems and addresses incidents.  Provides and monitors required security training for GSA associates.