The IRSC is responsible across the enterprise for identifying material internal and external risks to information security and privacy from a technological standpoint, and for implementing safeguards to address those risks.