You need a named BSA officer, CRA oficer, Security officer - which have the accountability.
IMO, like Lori mentioned the work can be handled by various departments and training/implementation outsourced.
_________________________
Integrity. With it, nothing else matters. Without it, nothing else matters.