Perform Qualitative Risk Analysis

Qualitative analysis is the first, faster pass at understanding which risks actually matter most — it ranks risks relative to each other using judgment and structured scales rather than hard numbers. It starts with a nominal classification of risks within the Risk Breakdown Structure, grouping them by the categories already established in the risk management plan (environmental, organizational, project management, technical, and so on).

From there, the risk manager estimates each risk's likely impact on schedule, budget, resources, and scope, and prioritizes based on both impact and urgency — a high-impact risk that's still years away ranks differently than one that could hit next week. The risk matrix is the named tool for this: it combines an agreed assessment approach, historical information, clear definitions of probability and impact, risk categories, and pre-established criteria into one consistent scoring method. An ordinal classification — ranking risks from most to least significant — follows from the matrix, and coaching stakeholders on how to categorize risk themselves helps the practice spread beyond just the risk manager.

Study focus: nominal classification groups risks by category (what kind of risk it is); ordinal classification ranks them by severity (how bad it is). PMI tests both terms, and mixing them up is a common wrong-answer trap.