Methodology for evaluating usage and comparison of risk assessment and risk management items