Which of the following is a PRIMARY responsibility of an information security governance committee?

Approving the purchase of information security technologies

Approving the information security awareness training strategy

Reviewing the information security strategy

Analyzing information security policy compliance reviews