Quantitative vs Qualitative Risk Assessment: Which Method Should You Use?
The Question Behind Every Risk Assessment
Before a risk assessment begins, there is always a prior question that is rarely asked explicitly: how precise does this assessment need to be?
A safety officer at a construction site conducting a pre-task hazard review needs a method that is fast, practical, and produces a result that field workers can act on in minutes. The same safety officer asked to justify a $2 million investment in a new process safety system to the board of directors needs something very different — numbers, probabilities, defensible calculations.
These two needs call for fundamentally different methodologies. Using the wrong one for the context produces either an over-engineered result that no one uses, or an under-evidenced position that no one trusts.
Quantitative and qualitative risk assessment are not competing approaches — they are complementary tools for different questions. Understanding when to use each is one of the most practically valuable competencies in occupational health and safety.
What Is Qualitative Risk Assessment?
Qualitative risk assessment evaluates risk using descriptive categories rather than numerical values. Likelihood and consequence are expressed in terms such as "low / medium / high" or "unlikely / possible / likely / certain" and combined using a risk matrix to produce a risk rating.
Qualitative assessment is the dominant approach in most general workplace safety contexts. It is accessible, fast, and does not require specialist statistical knowledge. Its output — a risk rating on a color-coded matrix — is immediately understandable by managers, supervisors, and workers without technical training.
How a Qualitative Risk Matrix Works
| Consequence → / Likelihood ↓ | Negligible | Minor | Moderate | Major | Catastrophic |
|---|---|---|---|---|---|
| Almost Certain | Medium | High | High | Critical | Critical |
| Likely | Low | Medium | High | High | Critical |
| Possible | Low | Medium | Medium | High | High |
| Unlikely | Low | Low | Medium | Medium | High |
| Rare | Low | Low | Low | Medium | Medium |
How to use: Assess the likelihood of the hazardous event occurring, assess the consequence if it does occur, and find the intersection. The resulting risk rating determines the urgency and type of control required.
Strengths: Simple, fast, requires no specialized software or training, produces actionable outputs.
Limitations: Subjective — two assessors may assign different ratings to the same scenario; no mathematical basis for comparing risks across different hazard types; cannot provide a defensible numerical justification for large investment decisions.
What Is Semi-Quantitative Risk Assessment?
Semi-quantitative risk assessment assigns numerical scores to likelihood and consequence categories and multiplies them to produce a numerical risk score. The scores are not true probabilities — they are structured ordinal scales — but they produce a number that allows risks to be ranked and prioritized more precisely than a qualitative matrix alone.
The Fine-Kinney method is the most widely used semi-quantitative approach. It uses three factors:
Risk (R) = Probability (P) × Frequency (F) × Consequence (C)
Where:
- P (Probability) — probability that a hazardous event leads to harm (scored 0.1–6)
- F (Frequency) — how often the person is exposed to the hazard (scored 0.5–6)
- C (Consequence) — severity of the outcome if harm occurs (scored 1–100)
The calculated risk score (R) falls into defined risk bands that specify the required response:
| Risk Score (R) | Risk Band | Required Action |
|---|---|---|
| > 400 | Very High | Work must stop immediately; risk must be reduced before resuming |
| 200–400 | High | Immediate corrective action required |
| 70–200 | Significant | Corrective action required with defined timeline |
| 20–70 | Possible Danger | Corrective action should be taken |
| < 20 | Acceptable | Acceptable risk; monitor |
Fine-Kinney is particularly well-suited to industrial contexts where multiple risks must be prioritized against each other, where a defensible ranking is needed for resource allocation, and where regulators or auditors require a documented, structured methodology.
What Is Quantitative Risk Assessment?
Quantitative Risk Assessment (QRA) — also called Probabilistic Risk Assessment (PRA) — expresses risk as a calculated numerical probability, typically as a frequency of harm per unit time (e.g., fatalities per year, probability of an explosion per facility-year).
QRA uses historical incident data, failure rate databases, fault tree analysis, and event tree analysis to calculate actual probabilities of hazardous events and their consequences. The output is not a risk band or a color code — it is a number: "The estimated probability of a toxic gas release causing one or more fatalities is 3.2 × 10⁻⁴ per year."
Key QRA Methodologies
| Method | Description | Used For |
|---|---|---|
| Fault Tree Analysis (FTA) | Deductive method identifying combinations of failures leading to a specific top event | Frequency estimation of specific failure scenarios |
| Event Tree Analysis (ETA) | Inductive method tracing consequences of an initiating event through a series of outcomes | Consequence estimation following an initiating event |
| Bow-Tie Analysis | Combines FTA (causes) and ETA (consequences) in a visual barrier model | Barrier effectiveness assessment |
| Layer of Protection Analysis (LOPA) | Semi-quantitative method identifying independent protection layers | Safety instrumented system (SIS) design |
| Quantitative Risk Assessment (QRA) | Full probabilistic assessment combining frequency and consequence calculations | Land use planning, regulatory compliance, major project decisions |
Comparison: Qualitative vs Semi-Quantitative vs Quantitative
| Factor | Qualitative | Semi-Quantitative (e.g. Fine-Kinney) | Quantitative (QRA) |
|---|---|---|---|
| Output | Risk band (low/medium/high) | Risk score (numerical) | Probability per unit time |
| Time to complete | Minutes to hours | Hours to days | Weeks to months |
| Specialist required | No | Some training needed | Yes — specialist required |
| Subjectivity | High | Moderate | Low |
| Defensibility | Limited | Moderate | High |
| Best for | General workplace hazards, routine tasks | Industrial risk prioritization, regulatory compliance | Major hazard facilities, investment decisions, land use planning |
| Standards | ISO 31000, ISO 45001 | Fine-Kinney (1976), various national standards | IEC 61511, API 752, Seveso III |
| Cost | Low | Low-medium | High |
How to Choose the Right Method
The choice between qualitative, semi-quantitative, and quantitative risk assessment depends on four factors: the consequence severity of the scenario, the purpose of the assessment, the resources available, and the regulatory or contractual requirements.
Factor 1: Consequence Severity
| Potential Consequence | Recommended Approach |
|---|---|
| Minor injuries, property damage | Qualitative (risk matrix) sufficient |
| Serious injury or fatality possible | Semi-quantitative (Fine-Kinney or equivalent) recommended |
| Multiple fatalities, major environmental damage, or loss of facility | Quantitative risk assessment required |
Factor 2: Purpose of the Assessment
| Purpose | Recommended Approach |
|---|---|
| Pre-task hazard identification (toolbox talk, JSA) | Qualitative |
| ISO 45001 compliance documentation | Semi-quantitative (provides more defensible evidence) |
| Prioritizing corrective actions across a list of identified hazards | Semi-quantitative |
| Justifying a major investment in safety systems to management | Quantitative or semi-quantitative with sensitivity analysis |
| Regulatory submission (Seveso, OSHA PSM, COMAH) | Quantitative (required by regulation for major hazard facilities) |
| Land use planning (buffer zones around major hazard sites) | Quantitative |
Factor 3: Available Data
Quantitative risk assessment requires reliable failure rate data. If your organization does not have historical incident data and reliable equipment failure databases, QRA will produce a false impression of precision. In data-poor environments, a well-executed semi-quantitative assessment is more honest and more useful.
Factor 4: Regulatory Requirements
In some jurisdictions and for certain facility types, the regulatory framework specifies the method:
- EU Seveso III Directive: Major hazard facilities must conduct QRA-level assessments for land use planning and emergency planning zones
- OSHA PSM 29 CFR 1910.119: Process Hazard Analysis required; HAZOP (qualitative) is acceptable as the PHA method; QRA may be required to justify the adequacy of safety systems
- UK COMAH Regulations: Quantified risk assessment required for top-tier establishments
For most workplaces subject to general OHS legislation (ISO 45001, OSHA General Industry, EU Framework Directive), the method is not prescribed — the assessment must be "suitable and sufficient." Semi-quantitative methods typically satisfy this standard for industrial environments.
The Fine-Kinney Method in Practice: A Worked Example
The Fine-Kinney method is the most widely used semi-quantitative approach in industrial OHS. Here is a worked example comparing the same scenario assessed qualitatively and semi-quantitatively:
Scenario: A maintenance worker replaces a filter on a chemical process pump. The filter contains residual process fluid (flammable solvent). The work is performed in an enclosed area with limited ventilation.
Qualitative assessment:
- Likelihood: Possible (solvent release during filter replacement has occurred before)
- Consequence: Major (fire or explosion could cause serious injury)
- Risk rating: High
- Action: Control measures required
Semi-quantitative (Fine-Kinney):
- Probability (P): 0.5 — unlikely that solvent release leads to ignition (ignition source controls are in place, but not complete)
- Frequency (F): 1 — maintenance performed monthly
- Consequence (C): 40 — severe laceration / burns possible; fatality unlikely
- Risk Score: 0.5 × 1 × 40 = 20 (Possible Danger — corrective action recommended)
The qualitative assessment rated this "High" — implying urgent corrective action. The Fine-Kinney assessment rated it at the bottom of the "Possible Danger" band — recommending corrective action without the urgency signal of the qualitative result.
Which is correct? It depends on the quality of the probability and frequency estimates. The Fine-Kinney result is more useful for prioritization (where does this fall relative to other hazards?), but it is only as good as the accuracy of the P, F, and C values assigned.
How FindRisk Implements Risk Assessment
FindRisk supports both qualitative and semi-quantitative risk assessment within the same mobile workflow:
Qualitative mode: Workers conducting routine inspections or pre-task assessments can rate hazards on a simple likelihood × consequence matrix, generating an immediate risk band and required action level.
Fine-Kinney mode: For more structured risk assessment — ISO 45001 compliance, corrective action prioritization, regulatory documentation — FindRisk guides the user through the P, F, and C scoring process with AI-assisted factor selection based on the hazard description. The risk score is calculated automatically, and findings are organized by risk band in the generated report.
AI-assisted hazard identification: Regardless of the assessment method selected, FindRisk's AI generates a comprehensive list of potential hazards based on the task, equipment, and environment described — ensuring that risk assessment begins with a thorough hazard inventory, not just the hazards the assessor already knew about.
Frequently Asked Questions
Can qualitative and quantitative methods be combined?
Yes — and this is common practice. A qualitative or semi-quantitative screening assessment is used to identify and prioritize hazards. The highest-priority scenarios are then subjected to quantitative analysis to validate control adequacy and justify investment decisions. This tiered approach concentrates analytical resource where it adds the most value.
Is Fine-Kinney a quantitative or qualitative method?
Fine-Kinney is classified as semi-quantitative. It assigns numerical scores to risk factors and produces a numerical risk score, but the scores are ordinal (structured ranking scales), not true probabilities derived from statistical data. It is more precise and more defensible than a qualitative matrix, but it does not produce a probability estimate in the way that full quantitative risk assessment does.
Which method is required by ISO 45001?
ISO 45001 does not specify a risk assessment methodology. It requires that hazard identification and risk assessment be systematic, proportionate to the complexity and nature of the hazard, and documented. Organizations are free to choose the method appropriate to their context — qualitative, semi-quantitative, or quantitative. Most certification bodies accept any documented, systematic method.
Can AI perform risk assessments?
AI tools can assist with hazard identification and support the scoring process, but the risk assessment itself requires human judgment. AI can generate comprehensive hazard checklists, suggest P/F/C values based on similar scenarios, and flag when a risk score suggests urgent action. But the final assessment — particularly the judgment about consequence severity and the adequacy of controls — requires a trained and competent OHS professional. FindRisk uses AI as an assistant to accelerate and improve the quality of risk assessments, not as a replacement for human judgment.
Conclusion
Qualitative, semi-quantitative, and quantitative risk assessment are not competing standards — they are a spectrum, and selecting the right point on that spectrum for each assessment context is a professional skill in itself.
For most general workplace hazards and routine safety management, a well-executed qualitative or semi-quantitative assessment is appropriate, proportionate, and meets the requirements of ISO 45001 and general OHS legislation.
For industrial processes with major hazard potential — and for decisions involving significant investment, regulatory submission, or land use planning — quantitative methods provide the level of evidence that defensible decisions require.
The worst outcome is using the wrong method for the context: a qualitative matrix for a major hazard that deserves quantitative analysis, or a resource-intensive QRA for a routine workplace hazard where a 10-minute Fine-Kinney assessment would provide all the insight needed.
Download FindRisk to conduct qualitative and Fine-Kinney semi-quantitative risk assessments on mobile, with AI-assisted hazard identification and automatic professional reporting.
Try FindRisk
Ready to modernize your safety workflow?
Conduct AI-powered risk assessments, generate reports instantly, and keep your team safe — anywhere, anytime.