This department is responsible for protecting the organization's information and technology assets through security measures and risk management.