A risk analyst must quantify the potential financial loss from a proposed cloud migration where multiple variables — outage frequency, per-hour revenue loss, and recovery duration — each have wide ranges of uncertainty. Senior management wants a probability distribution of possible loss outcomes rather than a single point estimate. Which risk analysis technique is MOST appropriate?