You are an information system auditor of HDA Inc. You are auditing and investigating the role of an Information Security Officer in relation to business process applications. What is the main duty or primary responsibility of an Information Security Officer concerning business process applications?