Its primary purpose is to assist the Board in its oversight of technology and innovation strategies, plans and operations, information, cybersecurity and data privacy risk management and third party technology risk management .