Risk Scoring

Risk scoring is quantitative, unless the administrator sets the qualitative system property to true.