Cyber security rist management

Why has risk modeling become pervasive in the security management professions?  Why do you believe that MSRAM has become a favored Risk Management tool?  Support your answer with the readings.