Evaluate the process used to quantify risks based on the relationship between impact and probability.