How are security roles and responsibilities assigned within the organization?
Security roles and responsibilities are assigned based on job functions and are clearly defined in the policy to ensure that all employees understand their specific security obligations.