Master key concepts with interactive flashcards
What is the difference between quantitative and qualitative risk assessment?
Click to reveal answer
Quantitative: assigns numeric dollar values to risk — uses ALE (Annual Loss Expectancy = ARO × SLE), AV, EF; enables direct cost-benefit analysis. Qualitative: uses descriptive scales (high/medium/low) and expert judgment; faster but less precise. Most organizations use a hybrid approach.
Click to show question