business departments can tailor models and processes to their specific needs. Operational and technical risks,
which rely for their management on expert knowledge that resides in the individual businesses,
are usually best managed by a decentralized approach, with supporting tools and best practices supplied by the central department