A practical quality-risk model · Northstar