In the context of the creation of this framework, definition also of the new Cyber Security Risk Management methodology applicable to all IT, OT and IoT environments, which specifies all the necessary phases required to perform a risk analysis and define the associated mitigation plan, in line with the stated cyber security objectives.