Which practice has a purpose that includes managing risks to confidentiality, integrity and availability?

To protect the information needed by the organization to conduct its business. This includes understanding and managing risks to the confidentiality, integrity, and availability of information, as well as other aspects of information security such as authentication and non-repudiation.

https://www.bmc.com/blogs/itil-management-practices/