Which tool is MOST commonly used during a prospective risk assessment to identify potential failure points before a process is implemented?