Broder: Risk Analysis and the Security Survey, 4th Edition


Case Studies with Questions and Answers

Chapter 04: Quantifying and Prioritizing Loss Potential

As the corporate security manager working with your inexperienced staff to develop a risk management program, you have introduced them to the quantitative approach using the annual loss expectancy (ALE) formula. Your staff is confused as to how to actually use this quantitative method. Therefore, you decided that a qualitative method may be easier for them to use. Once experience is gained in using that method and the staff understands the philosophy behind it, you can reintroduce the quantitative method to them. You explain to your staff that the qualitative method consists of using an estimated frequency-of-loss approach. The risk management model will use the adjectives high, medium, and low as factors to measure both frequency and severity of loss.

Questions

  1. Develop a decision matrix model to be used as a risk-handling decision aid and give an example of its use.
  2. Correct Answer

    See chapter for an example of what a decision matrix should look like.

Copyright © 2012, Elsevier Inc. All rights Reserved.