Critical Infrastructure Risk Management Approach

In executing a Critical Infrastructure Risk Management Approach, the US Department of Homeland Security advises that the risk assessment methodology be documented, reproducible and defensible. What do these terms mean and how would you ensure your risk assessment methodology meets these requirements?