BAQ Report Security

Does anyone know how to set securities for a BAQ Report based on the end user’s department?

I have a BAQ Report for the budgets/Spend for each department but they are wanting to set security so only data shows by department for that specific department head.

I am unsure of exactly how to go about doing this. Should I do it on the BAQ? or in the report?