The IG development policy process

  In your OWN opinion what department or role do you believe should own the IG development policy process? IT? Legal? HR? Risk Management? Records Management? Once the IG policy is developed what would be your Communication strategy plan for your organization?