Procedure to identify, analyze, evaluate and monitor risks. Methodology to implement, process handling and document control. Development of policies, map of processes and characterization of processes.
Management indicators and security objectives.