This department is responsible for protecting the organization's information assets through risk management, security policies, and incident response.