QuestionQ169Verified/Security Operations and ManagementCopy linkReport a problemAsk AstroTutorSave questionWhich of the following formulas represents risk?ARisk = Likelihood × Consequence x SeverityBRisk = Likelihood × Severity × Asset ValueCRisk = Likelihood × Impact × SeverityDRisk = Likelihood × Impact × Asset ValueShow AnswerAnswerExplanationA quantitative risk calculation combines the likelihood that an event will occur, the impact it would cause, and the value of the affected asset. Severity is generally incorporated within the impact assessment, so it is not a separate multiplier when impact is already present.Learn moreNIST CSRC: Risk GlossaryNIST IR 8286A Rev. 1: Identifying and Estimating Cybersecurity Risk for Enterprise Risk ManagementShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion