The CISO is in charge of a team that assesses the risks confronting the company and implements the required security procedures and technology to reduce such risks.