Its primary purpose is to assist the Board in its oversight of technology and innovation strategies, plans and operations, information, cybersecurity and data privacy risk management and third-party technology risk management .