If a risk cannot be assessed quantitatively, then it is assessed qualitatively based on the potential negative effects its occurrence would have on achieving strategic corporate goals and based on other qualitative criteria such as the impact on Continental’s reputation.