21 - An employee shall be designated to ensure the above 20 guidelines are being followed

Purpose:

Centralize security responsibility to reduce miscommunication and have someone who can resolve conflicts

Best Practices:

Pick an employee to run security who is well-versed in the policy and the systems of the business

Examples:

Head of Tech or IT