-Identify and evalute the potential risks to which the organization is exposed through internal audits and an exhaustive risks analysis, to determine the magnitude of each of them in order to prioritize them according to their probability or impact on the organization.

-Reduce or mitigate the risks that may negatively affect the company through the development of a consistent, deasible and quantifiable strategy that serves as a guide for the entire organization to respond to the need to control or mitigate risks

- Provide a strategic and consistent basis for making decisions for each type of risk.

- Plan actions focused on reducing or eliminating the company's potential risks.