A project manager is facilitating a qualitative risk analysis workshop. The team has identified numerous risks and now needs to prioritize them for further analysis or response planning. Which of the following is the primary tool used for this purpose?