Open Web Application Security Project: "How Much Security Do You Really Need?"
Read this page to learn about the basics of risk assessment.
Click http://web.archive.org/web/20160429011859/http://www.cgisecurity.com/owasp/html/ch03.html link to open resource.