[nsomaru]

One simple way of quantifying this is (amt/cost of harm) * (risk of occurrence)

[Vecr]

That's good, assuming the cost of harm is a cost in utility and not in money, otherwise it starts having issues. Make sure you have a good utility function.