A. The level of risk will be evaluated against qualitative criteria
Based on the definition of Qualitative (quality - subjective - from observations ) & Quantitative (numerical data )
"After establishing criteria for assessing consequences and likelihoods of information security risks the organisation should also establish a method for combining them in order to determine a level of risk.
Consequences and likelihoods may be expressed in a qualitative, quantitative or semi quantitative manner
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Acrisius
3 months ago