Tools and techniques for quantifying risks