When conducting a risk management analysis, each of the following factors is used to calculate expected loss except:
A) Probability of attack estimate, based on judgment)
B) Probability of attack being successful estimate, based on judgment)
C) Probability of attack remaining undetected estimate, based on judgment)
D) Loss occurring if attack is successful typically expressed in financial units,
E)g. dollars)

Question

Quizplus · Accepted Answer

The probability of an attack remaining undetected is not directly used to calculate expected loss. Expected loss is typically calculated using the probability of an attack occurring, the probability of the attack being successful, and the potential loss if the attack is successful. The detection of an attack is more related to response and mitigation strategies rather than the calculation of expected loss.

When Conducting a Risk Management Analysis, Each of the Following