Standards are important because: Choose one that's the most important of all. Qualitative judgments (opinions) are less likely to provide the best outcomes when building secure and resilient security programs. They are a proven method for minimizing risk to the organization. They are prescriptive in nature and thus minimize the risk of choosing the wrong control or solution. They are generally well understood and commonly used by most companies to mitigate risk