Why use a “model” approach?©

• Provides an operational risk roadmap

• Vendor-neutral, standardized, unbiased assessment vehicle

• Can be leveraged for process improvement at any organization, public or private

• Avoids the pitfalls of prescriptive solutions by promoting resiliency engineering and the use of organization-appropriate practices