Disclaimer: The opinions of the columnists are their own and not necessarily those of their employer.
Jeff Lowder

The Difference between Quantitative and Qualitative Risk Analysis and Why It Matters (Part 2)

Jeff Lowder writes the column Agile Security: Balancing Security with the Need for Agility
By posted in General • October 29, 2008 • 6:00am
Pages: 1 2 3 4 5

Numerical vs. Non-Numerical: Strengths and Weaknesses

 

Numerical

Non-Numerical

Pros
  • Meaningful
  • None

 
  • More useful as a business tool – results are expressed in management’s language (money)

 

 

 

 

 

 

Cons
  • How to quantify the intangibles?
  • Meaningless

 
  • Expensive
  • False sense of confidence (“I don’t have to deal with potentially difficult mathematical problems”)

In the author’s opinion, a failure to appreciate the numerical nature of qualitative values has been the source of significant confusion and error in the literature on information security risk management. Here are three examples:

Popularity: 18%

Pages: 1 2 3 4 5
Bookmark this post
•Sphere: Related Content•
Popularity: 18%
• Print Print
Related Articles:
, , , , , , , , , , , Post a comment or leave a trackback: Trackback URL.

Post a Comment

Your email is never published nor shared. Required fields are marked *

*
*