A couple of years ago you started your company which has now grown from 1 to 20 employees. Your companys information is worth more and more and gone are the days when you could keep it all in hand yourself. You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative risk analysis?
A.
This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.
B.
This analysis is based on scenarios and situations and produces a subjective view of the possible threats.
Explanation:
Another method of risk analysis is qualitative, and here numbers and monetary values are not assigned to components and losses. Instead, qualitative methods walk through different scenarios of risk possibilities, and rank the seriousness of the threats and the validity of the possible countermeasures.