To preserve the confidentiality, integrity and availability of information by applying a risk management process and gives confidences to interested parties that risks are adequately managed

1. Scope
2. Normative references
3. Terms and definitions
4. Context of the organization
5. Leadership
6. Planning
7. Support
8. Operation
9. Performance evaluation
10. Improvement