depending on the methodology a risk assessment team uses, likelihood and potential loss can be stated as either a qualitative measure or a quantitative measure.