When using the risk register to manage the cost risk analysis, which of the following models the way correlation arises, and avoids the need to estimate the correlation coefficients?