1. A method for risk evaluation comprising the steps: assigning a risk to an object, wherein the object has an object measure-value and the risk has at least one threat level; receiving a probability of the at least one threat level, wherein the probability refers to the object; and calculating the object measure-value by using the probability of the at least one threat level and by using a deviation-value that corresponds to the at least one threat level and relates to the object.