how many organisations look at each item on their risk register, multiply the likelihood by the impact to get an expected value for each item (how much they expect that risk, on average, to cost them), add it all up, and carry the total on their accounts as a liability?