Cyber-ERM Playbook Chapter (FINAL DRAFT)

The development of a new chapter for the Federal ERM Playbook was a major product and output of the COI in 2020. Attached are the final drafts of the Chapter and Appendix + Glossary that were submitted to Treasury in December 2020. This chapter will be incorporated into the revised Version 1.1 of the Federal ERM Playbook in early 2021. The chapter addresses the foundations of IT security and cybersecurity risk management and proposes best practices on how to integrate these functional domains of risk management into broader enterprise risk assessments and reporting that occur at the federal agency level. Many thanks to the numerous participants and contributors to the writing and review of this important addition to the Playbook.