Quantitative risk analysis