When reviewing an organization's IT governance processes, which of the following provides the BEST indication that information security expectations are being m...