Watch this video on YouTube
You are the IT risk manager at HDA Inc. In the context of establishing an organization's IT risk culture, which entity should be PRIMARILY responsible?