A couple of years ago you started your company which has now grown from 1 to 20 employees.
Your company’s information is worth more and more and gone are the days when you could keep
it all in hand yourself. You are aware that you have to take measures, but what should they be?
You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative
risk analysis?

A.
This analysis follows a precise statistical probability calculation in order to calculate exact loss
caused by damage.

B.
This analysis is based on scenarios and situations and produces a subjective view of the
possible threats.

Explanation: