We use a 5 tier risk rating system, ranges are Low, Moderate/Low, Moderate, Elevated, and High. Each tier includes quantitative (dollar amount) and qualitative scales (risk of legal action, level of regulatory scrutiny, potential for negative publicity, potential for business interruption, etc.).
I'm not sure the dollar ranges would be particularly helpful; I'd think that'd depend upon the size of the bank and other factors.