Implement and enforce information systems security policies, maintain operational IA posture, and support the ISSM in managing system security plans, configuration management, and compliance across software, hardware, and firmware — while administering user authentication and serving as Approval Authority for assigned information systems.