A company estimates a loss of $2,374 per hour in sales if their website goes down. Their webserver hosting site's documented downtime was 7 hours each quarter over the last two years. Using the…

The correct answer is A. Annualized loss expectancy. The annualized loss expectancy (ALE) is deduced by multiplying the single loss expectancy (SLE) by the annual rate of occurrence (ARO); in this example $2, 374 ?(7 ?4), respectively. This is a form of Quantitative risk analysis. Qualitative risk posture is deduced by measuring…

Defense-in-Depth and Security Architecture

Question

A company estimates a loss of $2,374 per hour in sales if their website goes down. Their webserver hosting site's documented downtime was 7 hours each quarter over the last two years. Using the information, what can the analyst determine?

Options

AAnnualized loss expectancy
BCVSS risk score
CTotal cost of ownership
DQualitative risk posture

How the community answered

(29 responses)

A
83% (24)
B
3% (1)
C
10% (3)
D
3% (1)

Explanation

The annualized loss expectancy (ALE) is deduced by multiplying the single loss expectancy (SLE) by the annual rate of occurrence (ARO); in this example $2, 374 ?(7 ?4), respectively. This is a form of Quantitative risk analysis. Qualitative risk posture is deduced by measuring and contrasting the likelihood (probability of occurrence) with the level of impact and by definition does not address risk using monetary figures. Total cost of ownership (TCO) is the sum of all costs (technical, administrative, environmental, et al) that are involved for a specific system, service, etc. CVSS risk scoring is not based off of this type of loss data.

Topics

#annualized loss expectancy#risk quantification#ALE#risk management

Community Discussion

No community discussion yet for this question.

Full GCED Practice