Full AWS Practitioner Certification Question

What is qualitative risk assessment primarily used for?