A security steering committee spends every meeting on individual service-desk tickets. What should its agenda emphasize?

1. Strategic priorities, material risks, resource decisions, and program oversight
2. Only product demonstrations
3. Only the count of emails sent
4. Every password reset