Quantitative Risk Assessments Flashcards
Quantitative Risk Assessments
Based on numeric values $
Asset Values
QRA
Quantitative Risk Assessments
percentage of asset value loss when negative incident occurs
Exposure Factor (EF)
Quantitative Risk Assessments
how much loss is experienced during one negative incident
Single Loss Expectancy (SLE)
Quantitative Risk Assessments
Single Loss Expectancy
Multiply asset value (AV) by exposure factor (EF)
Quantitative Risk Assessments
Asset Value (AV) = $24,000
Exposure factor (EF) = 12.5 %
AV X EF = SLE
example of SLE
$24,000 x 0.125 = $3,000
Quantitative Risk Assessments
Calculate
$3,000 = AV/$24,000 x EF/12.5%
risk of downtime
SLE = Asset Value (AV) x Exposure Factor (EF)
Quantitative Risk Assessments
Expected number of yearly occurrences
ie: 2 - 3 x per year
Annualized rate of occurrence (ARO)
Quantitative Risk Assessments
Total yearly cost of bad things happening
ALE = SLE x ARO
Annualized loss of expectancy (ALE)
Quantitative Risk Assessments
ALE = SLE x ARO
ie: $2500 x 2 = $5,000
Spending less than $5,000 yearly to protect the asset is worthwile
Quantitative Risk Assessments
ALE = SLE x ARO
$6,000 = $3,000 x 2 == Annualized loss expectency
Calculate Annualized Loss Expectancy
spending less than $6,000 to protect our ecommerce site is worthwhile
Quantitative Risk Assessments
Calculated by multiplying the asset value (AV) by exposure value (EF)
SLE
Quantitative Risk Assessments
calculated by multiplying the annualized rate of occurrence (ARO) by the SLE
ALE