Management: How does the enterprise manage the information protection program?

Options:

Option 1: Use the enterprise security management approach shown in the depiction.
Option 2: Use an externally mandated approach.

Basis:

Enterprises manage by structures involving people with power and influence and organizational elements.