Watch this video on YouTube
Who is accountable for maintaining appropriate security measures over information assets?