Enterprise Risk Management Governance

The Enterprise Risk Management Office (ERM) maintains oversight of the governing bodies related to risk management

Risk Committee

Members of the committee are either selected or nominated by business unit leaders and members of Senior and Executive Leadership. Its purpose is to ensure the Executive Office of Technology Services and Security (EOTSS) is properly managing its enterprise risks and complying with all laws and regulations. 

Chief Information Security Officer Council

The Commonwealth Chief Information Security Officer and Chief Risk Officer oversees the Chief Information Security Officer (CISO) Council, which is comprised of CISOs from all of the state’s Executive Branch agencies and other cybersecurity officials.

This group meets monthly to promote coordination and collaboration on issues related to enterprise security and risk management impacting all agencies.