Purpose – This paper aims to propose a model, to operationalize the idea of enterprise risk management (ERM), relying on the concept of capabilities. The proposed model, labelled “Spring model”, is specifically tailored to the characteristics of project-based organisations, where risk is...