To appropiately assess and manage the information security risk to the company throught the implementation of risk analysis, security policies, security awareness, security monitoring and research.