A Cybersecurity Steering Committee Must Be Established By The Authorizing Official To Ensure The Support And Implementation Of The Cybersecurity Programs And Initiatives Within The Organization. Committee Members, Roles And Responsibilities, And Governance Framework Must Be Defined, Documented And Approved. The Committee Must Include The Head Of The Cybersecurity Function As One Of Its Members. It Is Highly Recommended That The Committee Reports Directly To The Head Of The Organization Or His/her Delegate While Ensuring That This Does Not Result In A Conflict Of Interest.