https://staragile.com/blog/quantitative-risk-analysis