One of the 31 risk assessment techniques in ISO 31010 is the bowtie.  Simple but powerful.  Here’s a great presentation on it.