https://mudassiriqbal.net/qualitative-risk-analysis/