The correct answer is: Risk mapping.
Risk mapping is a technique for assessing risks, in terms of frequency and severity. It leads on to risk measurement, but is not itself a technique for measuring risk. Risks can be measured as (severity x frequency) or (impact x probability), for which techniques such as statistical analysis (for example standard deviation and variance) and sensitivity analysis can be used.
