Which of the following governance bodies directs and coordinates implementations of the information security program? Response:

An Information Security Steering Committee provides oversight and strategic guidance but generally does not direct and coordinate implementations at an operational level.

Senior Management provides overall strategic direction and resources but doesn't typically get involved in the day-to-day directing and coordinating implementations of the security program details.

A Business Unit Manager is responsible for security within their specific unit but not for the overall enterprise-wide direction and coordination of the information security program.

The Chief Information Security Officer (CISO) is typically a senior-level executive with primary responsibility for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role involves directing and coordinating the security program's implementation across the organization.