Mechanisms exist to provide a cybersecurity & data protection controls oversight function that reports to the organization's executive leadership.