You cannot use qualitative measures to rank information asset values.

Question

Quizplus · Accepted Answer

Qualitative measures can be used to rank information asset values. Qualitative measures rely on subjective judgments, opinions, and perceptions of the people involved in the evaluation process, rather than on numerical or quantitative data. They may take into account factors such as the importance of the information asset to the organization, the impact of loss or damage to the asset, the degree of confidentiality or sensitivity of the information, and the difficulty of replacing or reproducing the information. While qualitative measures may be less precise and consistent than quantitative measures, they can still provide valuable insights and guidance for decision-making in information security risk management.

You Cannot Use Qualitative Measures to Rank Information Asset Values