How to do a Quantitative Risk Assessment (QRA)