The DPISC reviews and approves privacy and information security organizational changes, processes, and policies to maintain effective lines of accountability, responsibility, and authority for protecting information assets.