That person's mandate is quite broad. He or she must not only ensure that the policy is established, but also be responsible for control if there are problems on the development side and take corrective action. It's the same person who has to do all that.
On November 24th, 2009. See this statement in context.