The Difference Between Qualitative And Quantitative Methods In Risk Management

835 Words2 Pages

The lifecycle of a risk management process encompasses several steps and activ- ities. One of the crucial steps is risk analysis, in which the effects of identified risks have to be analyzed and assessed. This assessment can be performed by using either qualitative or quantitative methods. The main aim of the paper to state the main difference between qualitative and quantitative methods in risk assessment. In the first section i will give a brief introduction about risk man- agement lifecycle and risk analysis. In the second section a detailed description about qualitative and quantitative method will be given with their advantages and disadvantages and methodology used in each technique. In the last section real life examples are given , Risk management help us in a better decision making through a good understanding of risks and their likely impact. One of Preprint submitted to Elsevier August 8, 2016  the most crucial state in risk management is the assessment. Risk is assessed by identifying threats and vulnerabilities, then determining the likelihood and impact for each risk. Risk assessment can be done using qualitative or quantita- tive techniques. Qualitative risk assessment is a subjective evaluation, people’s opinion of how badly a particular problem might be. While quantitative risk assessment assigns values to information, systems, business processes, recovery costs,as a result risk impact, can be measured in terms of direct and indirect costs. 2. Risk Management life cycle Risk management is a process of thinking methodically about all possible risks or threats before they happen and setting up procedures that will avoid the risk, handle or reduce its impact. It is basically setting up a process and plan to deal and control a risk. • Risk Management Plan - specifies the management intent, system and procedures required for managing risks. This step shows how the next four steps are executed in an IT Risk Analysis Figure 1: Risk Managment Life Cycle One of the main important step in risk management is risk analysis. Risk is assessed by identifying threats and vulnerabilities, then determining the like- lihood and impact for each risk. However managing risks in IT is also the key element in risk management because it allow the system owner to protect the information system proportional with its value to the organization. Moreover understanding a risk allows organizations to prioritize short resources since all organizations have limited resources. There are different ways to assess the risk in your environment and resources that are available. One common thing is Business impact analysis , were from it we can understand the resources in the enviroment and threats that might have impact on these particular resources. Business impact analysis allow us to determine how likely some threat may occur and what is the impact on organi- zation if that happened. IT Risk Analysis is intended to carry out work of: • Resource Evaluation (information, software, hardware and physical re- sources) value of resource it is not only value of its purchase but also short term effects and long term consequences from its

Open Document