Historical events in terms of risk assessment

How can historical events be leveraged in terms of a risk assessment. I know you could for instance look at malware infections over the past x months to perform a better estimation of for your malware infection likelihood and impact (even though you can't actually completely rely on it as there are still uncertainties).

I was wondering if there are more categories or examples where historical events are used to perform a more effective risk assessment?