I think a large number of variables can be added to this (all of them justified), but my thought was: what if you wanted only one or two variables? what would be the minimum that can capture the risk?
For example, affiliation with shariahist-Islam alone is clearly not enough. Populations strongly attached to that notion (as in Malaysia) do not seem on the verge of a major insurgency.
and so on...