Information Security roles focus on protecting the confidentiality, integrity, and availability of organizational information. This area can include security policies, risk management, access controls, data protection, security programs, and technical and administrative security measures.