Estimate the probability of each risk.  Probability need not be in exact mathematical terms, but could also be in some other relative scale, such as high, medium, and low. 

Determine risk probability for individual risks and by category. 

Determine the risk return ratio.