This department is responsible for safeguarding the organization's information assets and managing security risks.