DHS enhanced its risk assessment by including three components – threat, vulnerability, and consequences – to estimate the relative risk of successful terrorist attacks on various urban areas.
http://www.gao.gov/docsearch/abstract.php?rptno=GAO-07-381R