Which one of the following is NOT a tool or technique that is appropriate for the quantitative risk analysis process?