...
Results of 1-Dec teleconference
A link to the NIST methodology document;
http://csrc.nist.gov/publications/nistpubs/800-30/sp800-30.pdf
Links to Mikey's mind-map summary of the methodology (discussed on the call)
DSSA - NIST SP800-30 Risk Assessment Methodology.pdf
...