In the context of security, what does governance describe?

the list of laws and regulations that a company must comply with, such as General Data Protection Regulation $($GDPR$)$

the company's reporting structure and how hierarchy of information is disseminated

how to formalize the strategic and high$-$level responsibilities, policies, and procedures around security

the policies implemented to ensure employees use the company's systems correctly

I don't know this yet.