Prioritization of hazards by means of a QFD-based procedure