Qualitative vs Quantitative Risk Analysis