Assessing Probability, Impact, and Exposure