This department is responsible for protecting the organization's information assets and managing governance, risk, and compliance related to technology.