Exam SY0-701 topic 1 question 562 discussion

C. Assigning roles and responsibilities for owners, controllers, and custodians Explanation: One of the most critical elements of effective security governance is ensuring that clear roles and responsibilities are assigned to individuals or groups within the organization, such as owners, controllers, and custodians. These roles define who is responsible for the security of data, systems, and processes, ensuring accountability and alignment with security policies and practices. Breakdown of the other options: A. Discovering and documenting external considerations: While important for risk management, external considerations are secondary to defining internal roles and responsibilities in governance. B. Developing procedures for employee onboarding and offboarding: This is essential for operational security but falls under procedural management rather than governance itself. D. Defining and monitoring change management procedures: While important for maintaining security, this is a part of operational controls rather than the core structure of security governance.