McKinsey & Company Interview Question

How to set up metrics for quantifying risks?