Classic Quantitative Analysis

Question 1

AV (asset value)

Answer 1

value of the asset according to the organization

Question 2

EF (exposure factor)

Answer 2

percentage of asset loss caused by identified threat

Question 3

SLE

Answer 3

(single loss expectancy) – potential loss if attack occurs [asset value * exposure factor)

Question 4

ALE

Answer 4

(annual loss expectancy) – the cost of loss due to a risk over the course of a year. (SLE*ARO)

Question 5

ARO

Answer 5

(Annual rate of occurrence) – estimated frequency the threat will occur within a year [# of incidents/time period]

Question 6

Risk register

Answer 6

Compilation of information related to vulnerability risks and countermeasures