Each business will have a team of people in charge of this project, usually including a Chief Information Security Officer (CISO) and an IT director. However, all employees are responsible in some way for ensuring their company's sensitive data is safe.