A project manager has identified 30 risks and documented them in the risk register. The project sponsor asks the PM to assign a rough priority to each risk quickly, using team estimates of how likely each risk is to occur and how severe its effect would be, so the team can focus attention. The PM does not yet have time or data to model dollar impacts. Which risk analysis approach best fits this request?