John works as a project manager for uCertify Inc. He's working on a project and has identified all possible risks. He needs to prioritize risks and assign a risk rating to them. Which of the following techniques will John use to accomplish the task