The ICT resources design must involve interaction with the ICT Risk Management process for the analysis of scenarios, the identification of the relative requirements and the assessment of the adequacy level of the measures covering them.