Upper management decides which risk to mitigate based on cost. This is an example of:
Qualitative risk assessment
Business impact analysis
Risk management framework
Quantitative risk assessment
Quantitative analysis / assessment is used to the show the logic and cost savings in replacing a server for
example before it fails rather than after the failure. Quantitative assessments assign a dollar amount.