How do you calculate risk quantitatively for SLE?

A.
single loss expectancy divided by the annualized rate of occurrence

B.
exposure factor multiplied by the asset value

C.
cost of recovery multiplied by the number of compromised servers