Protection of an enterprise’s tangible and intangible assets is increasingly challenging. Every company, no matter how small, finds itself immersed in a system characterised by continually evolving complexity and interdependency. In view of the growing complexity and uncertainty of systems, we need to approach risk management with a strategic vision of planning and prevention. In the face of new threats and a changing world, we need new risk management solutions and new actions; it is time to change our approach and begin to anticipate moves that could have a negative impact. Keeping in mind that prevention is our primary goal, we act with curiosity, responsibility and competence to come up with a security management system that is not merely reactive, with the high economic and social cost this involves, but capable of becoming a form of participatory, proactive security.