How do you assess and monitor risk?

Risk is assessed by various criteria. These are typically how likely something is to happen, how frequently it might happen, and how important an effect it could be. After judgment has been made on the theoretical risk then it is monitored periodically to see if those factors have changed.