Audits and assesses cybersecurity policies, systems, and controls, ensuring compliance and identifying vulnerabilities.