Is it that straightforward?

Yep. We have done extensive research into the various risk methodologies and believe that risk, at the end of every calculation, is a subjective decision. So with that said, we decided to take the more straight forward and simplest approach to risk analysis possible.

So the calculation looks like this: Threat Level - Safeguards Level = Overall Risk

Easy eh?