Which of the following is responsible for legal and regulatory liability?

Which of the following is responsible for legal and regulatory liability?

A.
Chief security officer (CSO)

B.
Chief legal counsel (CLC)

C.
Board and senior management

D.
Information security steering group

Explanation:
The board of directors and senior management are ultimately responsible for all that happens in the organization. The others are not individually liable for failures of security in the organization.