This department is responsible for protecting an organization's information and technology assets from threats and vulnerabilities.