The insurance industry is built on answering “where” questions: Where do organizations have the greatest risk