The authors argue that business processes rather than industries are the level of analysis that should be used in preventive screening for organized crime infiltration. They introduce a diagnostic review model labeled PST (primary, secondary, tertiary) risk analysis model for analyzing business processes. This conceptual model can be the starting point for identifying and analyzing the vulnerability of certain sectors of society. The PST risk analysis model distinguishes between primary (basic illegal activities); secondary (processing of profit: money laundering); and tertiary (investments) types of criminal activities. The diagnostic review model can produce the following output: risk profiles of business processes and a risk profile for a specific sector on the basis of specific risk profiles of processes in that sector. The model should at least include a summary and description of the business processes, discouraging and incentive indicators regarding the business processes, a summary of the business processes sectors, and a score and weighing method to combine the indicators and to establish PST risk profiles. 1 table, 6 figures, and 21 references