What would be an appropriate difference between a qualitative and a quantitative risk analysis?
A.
Qualitative is a subjective observation, while a quantitative approach defines statistical costs associated with a threat.
B.
Quantitative approach is a subjective observation, while a qualitative approach defines statistical costs associated with a threat.
C.
Qualitative defines the overall appeal of a target or a resource, while quantitative is defined as (threats x vulnerability x asset value) x controls gap.
D.
Quantitative approach indicates the total cost of security implemented for protection, while qualitative identifies the expected acceptance of the security policy from the organization.
Explanation:
Qualitative analysis is subjective and based on observation and
experience, while quantitative analysis deals with getting actual numbers/costs to
make a decision.