A qualitative risk assessment uses descriptive categories such as High, Medium, and Low rather than requiring precise numerical estimates.
Answer
true
Explanation
### Why this is right
Qualitative assessment uses descriptive judgments and categories. It can rely on expert discussion and limited data, unlike quantitative analysis, which uses numerical measures.
### The concept
A qualitative rating communicates relative concern in an accessible way, often using a heat map. Its speed and readability are useful for strategic or non-technical audiences. Because judgments can vary between people, the rating is subjective and is less suited to detailed cost-benefit calculations.
### Terms
- **Qualitative assessment**: an assessment using descriptive categories rather than numerical estimates.
- **Heat map**: a visual display that uses categories or colors to show relative risk levels.
### Remember
Descriptive labels indicate relative concern, not a precise dollar value.
Related Questions
- Which sequence correctly represents the core risk assessment steps listed in the lesson?(basic)
- A ransomware event has a 20% annual chance and an expected loss of $500,000 per incident. Using ALE = SLE × ARO, what is the estimated annualized loss?(intermediate)
- Which option correctly classifies a firewall in the lesson’s control categories?(basic)
- The e-z-buy application must handle usernames, passwords, and payment information while meeting a stated 99.999% uptime requirement. Which planning response best follows the lesson?(advanced)
- A team is modeling a database system and considers a possible structured query language injection attack. What is the main purpose of this activity?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free