Why are we still using risk management tools (e.g. ISO 31010) to focus only on the threats to an organization?  I was pleasantly surprised when reading the description of the “Structured “What-if” Technique” where I found the following strength and limitations information:  “SWIFT can be used to identify opportunities for improvement of processes and systems and generally can be used to identify actions that lead to and enhance their probabilities of success.” Continue reading →