The costs relating to any digital risk can be material, and most organizations do not calculate the risk of such exposure. It is the job of the CFO to ensure that the business appropriately reflects those risks in the 10-Q and 10-K filings.
Creating and maintaining digital policies is, by nature, a team endeavor. But you also need someone to lead the team.
A good digital policy repository will enable digital workers to self-service to guidance, and you will have a higher rate of compliance.
Organizations have historically relied on IT for technical systems execution and, with the rise of websites and associated digital operations, that norm continued. So why can't IT own digital policies?