How does the concept of 'policy' support CSI governance?
-
A
Policies set mandatory expectations for how CSI activities must be conducted, ensuring consistency and accountability
-
B
Policies are optional guidelines that teams may follow if convenient
-
C
Policies replace the need for CSI processes
-
D
Policies are only relevant for information security, not service improvement