The Risk Management Unit is concerned with preparing and developing risk management policies and procedures related to all financial, administrative, operational, technical, and informational affairs of the SDC and determining mechanisms for following up on their implementation. Establishing procedures for granting permissions to use all electronic systems and applications used in the SDC, and periodically reviewing the permissions granted to all users in accordance with functional requirements. In addition to developing and implementing an information security system, and determining technical, physical and procedural controls.