Yup. I've been quiet of recent, but that's in part because I've been working on this piece:
http://lcamtuf.coredump.cx/prep/
It's a fairly systematic and level-headed approach to threat modeling and risk management, except not for computer systems - and instead, for real life. There's not much I can add on top of what's already said on the linked page; have a look, you will probably find it to be an interesting read.
EmoticonEmoticon