Risk management: Qualitative and Quantitative