Loading: How and When to Quantify Information Risk