The Risk Management process is aligned with the ISO recommendations and seeks mainly to distinguish what is irrelevant from what is material, requiring an active management which involves the assessment of sources of risk, the probability of occurrence of a certain event, and the consequences of its occurrence within the context of the control environment.