Information Security is the responsibility of the Chief Information Security Officer $($CISO$)$

the IT Department

the Information Seurity Department

everyone in the Organizaiton

the Chief Executive Officer $($CEO$)$