the qualitative risk analysis process where risks are prioritized based on their probability and impact.