The CISO is responsible for the overall management and oversight of IFCs Information Security Program. The CISO is responsible for protecting IFCs information assets against any potential threats and vulnerabilities that could impact the confidentiality, integrity and availability of IFC information. The CISO devises the Information Security strategy and architecture in alignment with business requirements and recommends implementation of controls.