Develop, implement, maintain, and review information systems security policies, procedures, and plans in accordance with applicable requirements, including 32 CFR Part 117 / National Industrial Security Program Operating Manual (NISPOM), the Defense Security Service Authorization and Assessment Process Manual (DAAPM), the Joint Special Access Program (SAP) Implementation Guide (JSIG), ICD 503, the NIST Risk Management Framework (RMF), and Security Technical Implementation Guides (STIGs), as applicable to assigned systems and programs. The Information Systems Security Manager (ISSM) is responsible for protecting the organization’s information, networks, systems, and computing resources from security threats and for maintaining the cybersecurity and Risk Management Framework (RMF) posture of classified programs in accordance with applicable government directives, customer requirements, and program requirements.