Under JTC1, convened jointly by ISO and IEC, this subcommittee develops standards, technical reports, and specifications to mitigate cyber-risks and attacks, online fraud, information and identity theft, and data breaches. Online information systems need to be secure and resilient to prevent leakage of people’s sensitive and personally identifiable information. The subcommittee develops general methods, management system requirements, techniques, and guidelines to address information security, cybersecurity, and privacy.