Which of the following most commonly falls within the scope of an information security governance steering committee?

 Role of Governance Steering Committees: Information security governance steering committees oversee the creation, approval, and maintenance of security policies. They ensure that policies align with organizational objectives and regulatory requirements.  Policy Vetting as a Core Function: Ensures policies are comprehensive, relevant, and enforceable. Addresses the balance between security and operational efficiency.  Why Other Options Are Incorrect:
A . Approving Access: This is typically handled by access control processes or data owners.
B . Security Awareness Programs: Content development is operational, not governance.
C . Interviewing Candidates: Staffing decisions are usually outside the committee's scope.  Reference: EC-Council underscores policy governance as a fundamental responsibility of information security steering committees