The numerical evaluation of both incident consequences and probabilities or frequencies and their combination into an overall measure of risk.