A newly hired chief information security officer $($CISO$)$ met with the human resources $($HR$)$

department to discuss how to better manage the company's access to sensitive information.

In what way does this meeting fall under the responsibility of the new CISO?

Monitoring audit logs

Revicwing user permissions

Documenting access controls

Managing security$-$related incident response