Quantitative Risk Management Versus Qualitative Risk Management