Identify where the application of risk management within an organization can be improved

Understand the nature of risks facing an organization and the actions needed to respond

Provide independent risk information at key decision points within a program or project

Show to which organizational activities risk management should be applied