The above policy functions through the implementation of a specific ICT Risk Management process which aims to guarantee the confidentiality, integrity and availability of information and enable the company to assess and align the information confidentiality requirements with the company’s business targets, as well as ensure its compliance with the legislation in force.