Quantitative Risk Assessment in Regulation