With the ongoing introduction of legislative regulatory requirements, the industry tendency is to view subjective interview questions as another form of metric. However subjective interviews and assessment are not repeatable and are dependant on the skill of the interviewer as well as the knowledge, patience, and honesty of the person being interviewed.

The Prevari Approach entails removing subjectivity from all compliance-related interviews and wherever possible developing a Yes/No methodology. The Prevari Approach allows questions to be mapped to both the CIAA risk model as well as the relevant compliance requirement such as ISO, PCI, HIPAA, DITSCAP, and NIST.