Risk equation, qualitative vs quantitative, ALE/SLE/ARO, risk treatment, FAIR, ISO 31000, 800-30, cyber insurance