4. Semi-quantitative risk characterization