How we identify and agree CSP policy and strategy, and who is responsible for the governance of the organisation.