Governance begins with the Information Risk Committee (IRC), which is a management committee that is a part of Webster’s overall enterprise risk management framework and is responsible for overseeing information technology and security risk, including technology risk and cybersecurity.