The Protiviti Risk Model helps to source and size these risks, and creates a common language for the organization to discuss and determine different acceptable risk levels. Only after vital business risks have been identified can security solutions be evaluated and implemented.