1. A computer-assisted method comprising: identifying a set of risk assessments, a set of control assessments, and a set of financial losses; translating, by a risk management computer system, the set of risk assessments and the set of control assessments to a set of risk states and a set of risk points; and conducting, by a risk management computer system, data analysis and statistical analysis on the set of financial losses, the set of risk states, and the set of risk points, wherein the data analysis and the statistical analysis includes a qualitative comparison and analysis and a quantitative comparison.