To protect the information needed by the organization to conduct its business

To reduce the likelihood and impact of incidents by identifying actual and potential causes of incidents, and managing workarounds and known errors

To align the organization’s practices and services with changing business needs through the ongoing identification and improvement of services

To minimize the negative impact of incidents by restoring normal service operation as quickly as possible