To concentrate on treating the most serious risks, methods of business risk management usually seek to identify the main risks and to assess their relative importance. Risks are typically assessed in terms of their chances of occurrence and the severity of their consequences. The assessments may be performed by qualitative, semi-quantitative or quantitative analysis. This paper is focussed on quantitative methods, requiring assessments of specific probabilities and values for consequences.