After receiving the annual audit results from the Inspector General's office, a cyber specialist begins identifying improvements to existing change management processes. Which of the following roles would likely own the change management process? (Select the two best options.)