About the Cyber-ERM COI

Welcome! This is a community of interest for federal practitioners of ERM, IT risk management, cybersecurity risk management, and other disciplines, to address the topic of integration of cybersecurity risk management with agency ERM practices. The community is currently comprised of ERM, IT, OIG, and Performance/Strategy professionals interested in participating in this dialogue. We meet approximately quarterly, or more frequently for special projects. We share best practices and collaborate on projects that will advance integration in these areas. Explore the different topic streams to link to recent COI projects and relevant publications.

Questions can be posted on the forum directly. Please remain respectful of the opinions of others.

Note: Support contractors can be invited to participate by their federal sponsor, if their work directly supports the federal sponsor’s efforts in this area. Vendors are not included at this time to enable transparent dialogue within the federal community. Non-AFERM members are welcome, although AFERM members will have access to additional materials on aferm.org.