Virtual Cyber & Technology Risk Management Forum

Confidential – Not for Public Distribution

Key Strategic Themes

• FOSTER EXPERIMENTATION, INNOVATION AND DISRUPTIVE THINKING We identify, evaluate and deploy new and emerging technologies to enable business strategies by empowering teams to elevate ideas, test them, and then evaluate their potential value to the S&R Division and/or Function. • TRANSITION END Ͳ TO Ͳ END BUSINESS PROCESSES FROM AGGREGATED POINT SOLUTIONS TO INTEGRATED PLATFORMS We improve user experience, minimize data silos, eliminate unnecessary cost/complexity, and reduce time to market by effectively leveraging integrated platforms to support end Ͳ to Ͳ end business processes instead of aggregating multiple independent point solutions. • BUY VS. BUILD / CLOUD FIRST We bring “best in class” industry and market leading platforms to S&R through robust buy vs. build analysis, market research, proactive exploration and provisioning. Our default position is to acquire commercial cloud Ͳ based platforms, limiting point solutions and/or custom development to only those scenarios where it is absolutely required. • MAXIMIZE THE VALUE OF ENTERPRISE INVESTMENTS We actively engage with Board and System IT to ensure enterprise investments are proactively established and can be fully and effectively leveraged by S&R. • RISK Ͳ BASED SECURITY We deploy the most appropriate information security protections and design security to avoid unnecessary complexity, reflect transparency of risk decisions, and support frictionless (positive end user experience) integrated security.

Board of Governors of the Federal Reserve System

4