What tools and techniques do you use to conduct a security risk assessment?

Technical