The ICT Risk Management process contributes to the security of information by managing the process of assessing and handling the operational risks to ICT resources who handle information in order to ensure: a) a level of confidentiality, integrity and availability of the information proportional to the respective value of the business, that is, the direct or indirect losses that a security incident can result in for the services provided to its customers; b) the security of the services provided to its customers and the levels of operational continuity stipulated in the contracts; c) the security of the personal information of employees, in compliance with current legislation and for employees’ protection.