Q28
Single choice
Which of the following must be done FIRST when implementing a culture and behavior governance component to ensure good governance and management of IT?