FFIEC IT Examination Handbook MGT-I.A.2(b): I.A.2(b) Chief Information Officer or Chief Technology Officer (Management)

The CIO or CTO is accountable for developing and implementing the IT strategy that supports the business strategy within the risk appetite, oversees the IT budget, performance management, acquisition oversight, professional development and training, implements the IT architecture, participates in planning, sits in a reporting structure that ensures accountability for security, resilience, risk reporting and alignment with business needs, and often leads the steering committee.