CRISC Certified in Risk and Information Systems Control – Question637

The annualized loss expectancy (ALE) method of risk analysis:

A.
uses qualitative risk rankings such as low, medium, and high
B. can be used to determine the indirect business impact
C. helps in calculating the expected cost of controls
D. can be used in a cost-benefit analysis

Correct Answer: D