A couple of years ago you started your company which has now grown from 1 to 20
employees. Your companys information is worth more and more and gone are the days
when you could keep it all in hand yourself. You are aware that you have to take measures,
but what should they be? You hire a consultant who advises you to start with a qualitative
risk analysis. What is a qualitative risk analysis?

A.
This analysis follows a precise statistical probability calculation in order to calculate exact
loss caused by damage.

B.
This analysis is based on scenarios and situations and produces a subjective view of the
possible threats.