Information security is a triad of information security: confidentiality, integrity, and availability. Security will (if not already) need to pair itself with IT, Audit, and Privacy in order to be effective. Privacy teams focus on salvaging the company brand and market value after a breach. IT staff is not equipped to resist attacks, especially advanced ones. Privacy teams are not positioned to resist or detect incidents. IT is usually ill-equipped to stop intelligent adversaries who are three steps ahead of overworking administrators.”]
Source: https://taosecurity.blogspot.com/2008/05/security-whose-responsibility.html