This department is responsible for protecting the organization's information assets and ensuring compliance with security policies.