Do you always quantify risk in monetary terms?

Only when it improves decision quality. Sometimes clear prioritisation is enough.