Which of the following most commonly falls within the scope of an information security governance steering committee?

 Role of Governance Steering Committees:

Information security governance steering committees oversee the creation, approval, and

maintenance of security policies. They ensure that policies align with organizational objectives and

regulatory requirements.

 Policy Vetting as a Core Function:

Ensures policies are comprehensive, relevant, and enforceable.

Addresses the balance between security and operational efficiency.

 Why Other Options Are Incorrect:

A . Approving Access: This is typically handled by access control processes or data owners.

B . Security Awareness Programs: Content development is operational, not governance.

C . Interviewing Candidates: Staffing decisions are usually outside the committee's scope.

 Reference:

EC-Council underscores policy governance as a fundamental responsibility of information security

steering committees