Which of the following governance bodies provides management, operational and technical controls to satisfy security requirements? Response:

The Chief Information Security Officer (CISO) is responsible for developing and overseeing the information security program, but senior management provides the overarching governance and resource allocation.

Senior Management is responsible for setting the overall strategic direction for security, allocating necessary resources, and ensuring that the required management, operational, and technical controls are implemented and maintained across the organization to satisfy security requirements. While other roles contribute, senior management holds the ultimate accountability for these provisions.

An Information Security Steering Committee provides guidance and oversight, but senior management makes the ultimate decisions regarding resource provision and high-level control implementation.

A Business Unit Manager is responsible for security within their specific unit but does not typically provide controls for the entire organization's security requirements at the governance level.