Week 2 Discussion Post 12

Hello Dr. Salmon and classmates, welcome to the second week of this course.

Qualitative analysis is based upon the degree and likelihood of the danger occurring and its

severity to the organization. For example, the degree or likelihood of the danger occurring is

categorized as Low, medium, and high.

The low-risk categorization is because this even has never happened before and the chances

of happening are very slim. In this qualitative risk assessment categorization, you may say the

organization may accept the risk and will not worry to mitigate it.

In the medium-risk categorization, this is in most cases a repetition even and most likely will

occur based on the past records. The medium risk is never ignored and mostly the company

Quantitative analysis on the other hand is a concept of gathering more information to make

the best possible decision. For example, Laptop A is not connected to the network. You pink

the DNS to check the A record located in the forward lookup zone to see if it is resolving the

IP address, default gateway, DHCP. You make sure the ethernet cable is the required one and

that it is properly plugged. You make sure that you have paid the ISP, checked network ports

and firewall to identify thereason Laptop A cannot connect to the internet. The information

you gather from this assessment enables you to make a quantitative decision as to why

Laptop A was not able to connect to the internet. Quantitative analysis is mostly based on an

assumption which is why different measurements are taken to identify the root cause of an

event.