Manages IT and cybersecurity risks, updating policies, monitoring exposure, and assessing third-party risks.