What would be an appropriate difference between a qualitative and a quantitative risk analysis?

What would be an appropriate difference between a qualitative and a quantitative risk analysis?

What would be an appropriate difference between a qualitative and a quantitative risk analysis?

A.
Qualitative is a subjective observation, while a quantitative approach defines statistical costs associated with a threat.

B.
Quantitative approach is a subjective observation, while a qualitative approach defines statistical costs associated with a threat.

C.
Qualitative defines the overall appeal of a target or a resource, while quantitative is defined as (threats x vulnerability x asset value) x controls gap.

D.
Quantitative approach indicates the total cost of security implemented for protection, while qualitative identifies the expected acceptance of the security policy from the organization.

Explanation:
Qualitative analysis is subjective and based on observation and
experience, while quantitative analysis deals with getting actual numbers/costs to
make a decision.



Leave a Reply 0

Your email address will not be published. Required fields are marked *