The ISIMC shall be the principal interagency forum for identifying and recommending strategic high priority IT security and identity management initiatives to the FCIOC and OMB that enable Federal Government's information systems security programs and agencies' mission objectives through a comprehensive and consistently implemented set of risk-based, cost-effective controls and measures. The committee will recommend standard organization structures for information security committees across the Federal government; and ensure the tools, metrics and measures will lead to defensive operational capabilities and protections of the Federal networks, systems and applications. The Committee shall establish and oversee appropriate subcommittees, working groups, and/or task forces to perform the following functions:

1. Develop strategies to coordinate and facilitate the execution of the Comprehensive National Cybersecurity Initiative (CNCI) (National Security Presidential Directive 54/Homeland Security Presidential Directive 23 (NSPD-54/HSPD-23)).
2. Identify and recommend information security and identity management enhancements to policies, processes, and solutions, that address the strategies in (A) above and improve upon identification management solutions.
3. Provide oversight of the ISIMC subcommittees, working groups, and task forces. Coordinate with and provide advice to other Federal committees to improve collaboration, identify complimentary activities, and reduce duplication in security and identity management related areas. Review and concur on common security management requirements, performance measures, and Federal Enterprise Architecture (FEA) updates, program management plan, fiscal budget and funding strategy for security management service areas.
4. Promote the development and use of standard performance measures for agency information security.
5. Share experiences and innovative approaches related to information sharing and information security best practices that span both defensive operational security such as penetration testing regimes, and incident response mitigation, and span security policies compliance, such as FISMA or PMA achievement.
6. Identify common Computer Information Security Officer (CISO) and information assurance professional qualifications in coordination with the FCIOC IT Workforce Committee.

1. Security Program Management Subcommittee (SPMSC);
2. Identity, Credential and Access Management Subcommittee (ICAMSC);
3. Network and Infrastructure Security Subcommittee (NISC); and
4. Security Acquisitions Subcommittee (SASC).