Members of the central group possess a variety of technical skills and have specific information security responsibilities , such as developing policy , maintaining the firewall that protects the organization 's network from unauthorized intrusions , or supporting security staff assigned to individual business units .
No one in the group has technical skills , they just make due .