Which of the following is a PRIMARY responsibility of an information security governance committee?
A . Analyzing information security policy compliance reviews
B . Approving the purchase of information security technologies
C . Reviewing the information security strategy
D . Approving the information security awareness training strategy
Answer: C