In risk management, two types of methods are known for rating and assessment thereof: the qualitative method and the quantitative method. In this article, we will explain what they both consist of and their main advantages and disadvantages when it comes to measuring risk.
This method owes its popularity to the fact that it is generally applied at the beginning of any risk study, and it is widely used when time and monetary resources are scarce, given that compared to the quantitative method, its investment in both aspects is lower.
In the qualitative method, expert knowledge and criteria on the matter under analysis is imperative. Its main advantage has to do with its greater ease of calculation, since it does not imply an economic or probability assessment.
Qualitative analysis is built on elements that are related to each other: threats, vulnerabilities, impact and, in some cases, controls.
Threats: are the events identified as those that may affect the project's objectives.
Vulnerabilities: are the factors or elements that can increase the risk of a threat materializing in the project.
Impacts: are the consequences of the materialization of threats. Impacts are associated with a certain level: high, medium and low. These, in turn, are associated with certain factors, which can be economic, operational, human or image loss-related.
Controls: are measures that can counteract risk events. These controls include:
Over time, techniques have been created to try to make the method more precise and reduce the degree of subjectivity surrounding it. However, given the increasing complexity and importance of risks for companies in recent years, this method is complemented and broadened by using techniques from the quantitative method.
The quantitative method in risk analysis allows you to obtain a numerical valuation of the materialization of an event, either positive or negative, in terms of defined criteria, which can be monetary, operational, technical or human, among others, which makes the analysis more tangible and objective. However, there are authors that go further and define it as a method that allows the association of a probability and its corresponding distribution with the risk event and the consequences that it can have on the project objectives.
Quantitative analysis is usually carried out after qualitative analysis, but some authors indicate that it can be done separately and simultaneously, while others believe that it should take precedence over qualitative analysis. In any case, it is recommended that one complement the other in order to combine synergies.
In order to carry out such an analysis, the use of mathematical and statistical techniques, which require data collection, is necessary. Some of the most outstanding and widely used techniques are:
In any case, the decision of which method to use will depend on a series of factors such as the nature of the company, the availability of money, the quality of the information available and time.