FDIC Information Security and Privacy Strategic Plan: 2018-2021: Path Forward
In alignment with the FDIC IT Strategic Plan Goal 1, Information Security and Privacy, the FDIC ISP SP demonstrates commitment to mitigate risks across the Corporation, improve resilience of the Corporation’s systems and networks, and protect information assets.
The ISP SP is the foundation upon which FDIC will update its cybersecurity and privacy approach. The FDIC will develop an implementation plan that includes tasks tied to timelines and assigned to responsible parties. This will help guide the Corporation through the changes necessary to meet stated goals and objectives. In parallel, the organization will develop performance measures for the objectives and activities to track and manage progress. These measures will provide information needed to make resource-related decisions.
As part of the implementation plan, the FDIC will develop and use an Information Security and Privacy Strategy Roadmap that will operationalize the strategy by sequencing the activities needed to meet the goals and objectives. The Corporation will use the roadmap to:
- Prioritize initiatives
- Identify future needs
- Establish unity of effort among stakeholders
- Measure progress
- Enhance governance through transparency, accountability and data-driven decision making
- Revisit, refine, and update the ISP SP
The ISP SP will be reviewed annually for relevancy, currency, and applicability. It will be modified, as necessary, to keep pace with the changing environment. OCISO’s ability to successfully achieve the objectives in this plan requires the continued commitment and cooperative support of all FDIC.