It is important to have buy-in from all levels of management across the organization. One way you can push this participation is to utilize a matrix outlining the areas of responsibility for the applicable security controls within your Information Security Program.

Giving leadership this visual depiction highlighting that everyone play's a role in security is often a key turning point in developing ongoing relationships between the leadership objectives and the security everyone is responsible for.