Qualitative risk assessment

Definition
Qualitative risk assessment is

"[a] risk assessment that uses labels (such as, high, medium, and low), rather than actual numbers, to characterize anticipated likelihood and extent of harm to automated information resources."