The committee identifies measures and develops appropriate response strategies to operational information risks using a standard-based framework, and tracks the resolution and status of these risks on an ongoing basis.