Risk quantification shows which investments will help meet regulatory requirements, and maximize risk reduction.