1. A computer-implemented method for risk evaluation, the method comprising: using a system, wherein the system comprises a processor, a computer-readable medium, and distinct software modules embodied on the computer-readable medium, and wherein the distinct software modules when executed cause the processor to perform: accessing an object, stored in a memory, wherein the object is a component of a score-card and includes an object risk status and an object measure-value; receiving an assignment structure; assigning, based on the assignment structure, at least one risk to the object, wherein each risk includes a plurality of threat levels and an expectation value derived from the plurality of threat levels; receiving a probability for each threat level within each assigned risk, wherein the probability is associated with a deviation-value of the object measure-value; defining a probability distribution matrix based on the plurality of threat levels within each risk, wherein the matrix comprises a row for each threat level and each row includes the threat level, the deviation-value, and the probability, the deviation-value having a value type selected from the group of absolute number, absolute delta, percentage and percentage delta; determining the expectation value for each risk based on the probability distribution matrix; determining the object measure-value based on the expectation-value of each risk; determining the object risk status using pre-defined rules and based on an aggregation of each expectation-value corresponding to each risk assigned to the object; storing the object in the memory in response to determining the object risk status; and presenting the object-measure value and the object risk status.