The responsibility for applying security patches usually falls on the IT department or dedicated security team within the organization. However, it is a shared responsibility, and everyone in the company should be aware of the importance of keeping systems updated and following best practices for security.