In defining this framework, the new Cyber Security Risk Management methodology was established in methodology is applicable to all IT, OT and IoT environments and it describes all the phases required to carry out a risk analysis and define the related mitigation plan, in line with the stated cyber security goals.