Who is responsible for IT policy management?

Ownership sits with IT for technical policies, but effective policy management is cross-functional – HR for onboarding-related policies, legal and compliance for data protection, and department heads for anything application-specific. One named owner per policy avoids the gap where “everyone” ends up meaning “no one.”