Many organizations have a maintenance program, but few have a risk management program - these are not the same thing. A maintenance program asks if preventative maintenance is done, repairs are completed, refrigerant levels are checked. Good questions, but they focus on the condition of equipment. Operational risk asks "if this equipment became unavailable tomorrow what would happen to the business." Changing the question you ask changes the lens through which you priori