There are multiple models of PMOs. There are even vendors who sell a "PMO-in-a-box," a prepackaged PMO solution that purports to be able to be used by any organization. In what ways can adopting and following a PMO model be a risk for an organization? What steps should organizations take to ensure that the PMO that they establish is appropriate for the organization?