Providing risk oversight, challenge and monitoring for the Global Continuity and Third Party Vendor Management Program, including the collection of risk appetite, metrics and key risk indicators (KRIs), and reviewing issue management processes and consistent program adoption Our Corporate Information Security (CIS) team establishes the framework, policies and related programs to measure, monitor and report on information security risks, including the effectiveness of cybersecurity program protections.