creating security policies and for communicating those policies to system users.

___________________ is responsible for creating security policies and for communicating those policies to system users.

Answer: ISO