Risk Management The information security organization is responsible for ongoing vulnerability assessments and threat analysis to essential assets such as customer and employee data, critical business systems, and industrial control environments.