In terms of risk monitoring in the risk management proccess...

Gartner, a private sector company, utilizes a detailed cost-benefit analysis comparing the potential costs of a risk identified, compared to direct risk response costs, and the benefits or assessment of the costs avoided. Gartner also uses a risk assessment tool that calculates the cost of risk and its potential impact on the organization. This approach ensures that Gartner's risk management activities are focused on the most significant risks to the organization.

1- what is the tool gartner uses?

2- why is this a good practice for risk monitoring others shoulder implement too?

please be sure to cite references