Does anyone have a good risk analysis model (with quantificationformulas) for a SharePoint Server 2007 implementation?