The security department is in the business of change management rather than enforcement and works through trusted social networks of influence.
Security constantly responds to new business concerns and, as such, the portfolio of responsibilities and their relative importance will change over time.