There is a lot of research on how to do risk analysis, add some references and preferably an overview.