iRisk

iRisk, or the iRisk equation is another quantitative analysis formula. Like most quantitative analysis models, you solve for the risk by calculating the threat and vulnerability, and lower the risk when mitigating or compensating controls are added.

Here is where you can read more about iRisk: http://community.securestate.com/index.php?title=What_is_iRisk%3F