Who is responsible for decisions about security strategy?

Question $34$ options:

$1)$

IT people

$2)$

Shared: IT leaders and business leaders

$3)$

Business leaders

$4)$

Consultants

$5)$

Team of consultants and IT people