Process that, based on an analysis and evaluation of risks, identifies, selects, proposes and prioritizes policies, procedures or security measures for the protection of assets and the reduction of losses.
