Multiply the denominator not the numerator of risk - effect of risk mitigation works the math in your favour