Once complete, a BTA risk model reveals vulnerabilities and highlights the importance of having multiple layers of controls, including higher order controls such as engineered controls, and of routinely monitoring control effectiveness.