The identification of hazards, evaluation and risk assessment allows to know and understand the risks of the organization, it must also guide us in defining the control objectives and own actions for its management; in this lies its importance, because the quality will be determined on the coherence and validity of the results obtained the foundation for developing and maintaining risk management for the organization.