The Value at Risk (VAR) framework knows four stages:

• Identify threats
• Estimate likelyhood
• Estimate VAR
• Mitigate risk