Which of the following governance bodies directs and coordinates implementations of the information security program?

The Chief Information Security Officer (CISO) is a senior-level executive who holds the primary responsibility for developing, directing, and coordinating the overall information security program for an organization. This role involves establishing security policies, managing security operations, and ensuring the program aligns with business objectives and regulatory requirements.

An Information Security Steering Committee provides governance, oversight, and strategic guidance for the security program, but the CISO is the individual role responsible for its direct coordination and implementation.

A Business Unit Manager is responsible for managing security within their specific business unit or area of responsibility, not for directing the organization-wide information security program.

Senior Management provides overall executive support, resources, and ultimate approval for the information security program, but the CISO is the designated leader responsible for its day-to-day and strategic implementation.