https://rafeeqrehman.com/2023/02/14/risk-assessment-qualitative-quantitative-and-scoring/