Which of these is an advantage of quantitative risk analysis
over qualitative?
| A. | Easier in time and money. |
| B. Risk assessment and results are essentially subjective in both process and metrics. |
| C. A substantial amount of information about the target information and its IT environment must be gathered. |
| D. A credible basis for cost/benefit assessment of risk mitigation measures is provided. |
Which of these is an advantage of quantitative risk analysis
over qualitative?
| A. | Easier in time and money. |
| B. Risk assessment and results are essentially subjective in both process and metrics. |
| C. A substantial amount of information about the target information and its IT environment must be gathered. |
| D. A credible basis for cost/benefit assessment of risk mitigation measures is provided. |
