TAG: quantified risk assessment