Information Security Handbook

Quantitative analysis

Quantitative analysis focuses on irrefutable data that can be measured versus the qualitative assessment, which is based on the opinions of the individuals conducting the assessment. The quantitative assessment performs mathematical calculations to express risk in terms of financial loss, which is very useful when working to seek acceptance from business leaders for financial support of an information security initiative.

Quantitative assessment has the benefit of being based on measurable data, which can greatly help the information security professional in delivering a precise risk score based on mission-specific information derived from your organization business units. Being expressed in terms of money, it makes ...