react to this statement General management: I believe that general management should be first because they are the ones setting the overall strategies and direction of the organization. Additionally, they initiate and allocate resources for the IRPT and teams. InfoSec management: It's crucial because they are responsible for maintaining all the organization's data protected and ensuring that the IRPT works as needed. IT management: They are responsible for maintaining the security and functionality of the organization's systems. The legal department: This department is crucial to ensure that the company complies with laws and regulations related to information security