Most companies have a governance statement of some kind - probably signed by the board.

However,
Many top executives aren't made aware of the specifics as applies to them and devices and data that they use. The IT persons are too afraid to tell the brass. In these companies.