Every organisation is different. Every organisation has its own nuances and special requirements and this is true for every division or department too. It’s unlikely given the variation across different areas of an organisation that every employee risk profile will be the same.