Which of the following best describes a qualitative assessme

Which of the following best describes a qualitative assessment?

A. A qualitative assessment deals with real numbers and seeks to place dollar values on losses. These dollar amounts are then used to determine where to apply risk controls.

B. A qualitative assessment assigns ratings to each risk.

C. A qualitative assessment is performed by experts or external consultants who seek to place dollar values on losses.

D. A qualitative assessment is performed by experts or external consultants, is based on risk scenarios, and assigns non-dollar values to risks.

Solution

D. A qualitative assessment ranks the seriousness of threats and sensitivity of assets into grades or classes, such as low, medium, and high. It is performed by experts or external consultants and is based on risk scenarios. Although purely quantitative risk assessment is not possible, purely qualitative risk analysis is. Answers A, B, and C are incorrect because they do not adequately describe qualitative risk assessment