Each organisation has a “mission” and therefore, in absolutely general terms, it must address the problem of protecting itself against events that can place the pursuit of this fundamental objective “at risk” (and, as a result, all of the preliminary intermediate objectives). Risks, which are understood as “possible damage”, are connected to situations of uncertainty, with possible …