Identify risks: The first step is to identify all of the potential risks that could affect the project. This can be done by brainstorming with team members, reviewing historical data, and using checklists.
Assess likelihood: For each identified risk, assess its likelihood of occurring. This can be done using a scale of 1 to 5, with 1 being very unlikely and 5 being very likely.
Assess impact: For each identified risk, assess its impact on the project. This can be done using a scale of 1 to 5, with 1 being very low impact and 5 being very high impact.
Prioritize risks: Once the likelihood and impact of each risk have been assessed, prioritize the risks based on their overall severity. This can be done using a matrix or a risk register.
Quick and easy: Qualitative risk assessment is a relatively quick and easy process to perform, making it a good option for projects with limited time or resources.
Comprehensive: Qualitative risk assessment can identify a wide range of risks, both positive and negative.
Inexpensive: Qualitative risk assessment is a relatively inexpensive process, as it does not require specialized software or tools.
Subjective: Qualitative risk assessment is subjective, as it relies on the judgment of experts to assess the severity of risks.
Not quantitative: Qualitative risk assessment does not provide a quantitative measure of risk, which can make it difficult to make decisions about risk mitigation strategies.
Have limited time or resources
Are in the early stages of development
Are not complex or high-risk
Are large or complex
Have a high level of uncertainty
Are critical to the organization
In these cases, a more quantitative risk assessment method may be more appropriate.
Example of QRA matrix.