Score operational processes by failure exposure, control strength, handoffs and automation fit.
Useful dimensions include transaction volume, financial exposure, manual steps, handoffs, historical exception rate, control strength and recovery difficulty.
High-risk processes deserve stronger controls and more frequent review before they deserve more software.