Definition[]
Quantitative risk assessment is
| “ | [a] risk assessment that requires the use of actual numbers, calculations of ALE, and mathematical probabilities to characterize the anticipated likelihood and extent of harm to automated information resources.[1] | ” |