A method for risk mitigation comprises calculating on at least one processor, a likelihood of occurrence for a risk event, a degree of disruption for the risk event and a disruption time for the risk event. Each risk event is in a list of risk events. The likelihood of occurrence is based on a frequency of risk of the risk event. The degree of disruption is based on a severity of risk of the risk event. The disruption time is based on a duration of restoring an asset to a condition prior to the risk event. A value at risk based on the likelihood of occurrence, the degree of disruption and the disruption time is determined for the risk event. A mitigation action is determined to reduce the value at risk. An indication of the mitigating action is presented on a user interface.