Information and support processes, systems and computer networks are important business assets. Confidentiality, integrity and availability of information; necessary to protect and maintain competitiveness, cash flow, profitability, legal obligations and commercial image.

# Defining assets and assigning value
# Identifying threats, vulnerabilities, security requirements
# Calculating the risk
# Selection of appropriate risk mitigation (selection of controls)