The ICT Risk Management process, which attained the ISO ■ focuses its scope on technological assets; ■ contributes to the security of information by managing the process of assessing and handling the operational risks to the ICT resources which process the information.