Mechanisms exist to define cybersecurity responsibilities for all personnel.
Does the organization define cybersecurity responsibilities for all personnel?