Ensures information security through policy development and risk assessments.