Which of the following components of a policy BEST enables the governance of enterprise IT?

Disciplinary actions are enforcement mechanisms but do not, by themselves, establish the framework for governance.

Regulatory requirements define what needs to be governed but do not specify *how* governance is executed within the organization.

Roles and responsibilities clearly define who is accountable for specific actions, decisions, and outcomes related to IT processes and assets, which is fundamental to establishing accountability and ensuring effective governance. By assigning ownership and expectations, this component drives compliance and operational effectiveness across the enterprise IT landscape.

Terms and definitions ensure clarity in understanding the policy but do not actively enable the governance structure or execution.