🔥 3-day streak
ISACA CRISC — Certified in Risk and Information Systems Control140 / 150
Question 140 of 150

A risk analyst is quantifying the risk of a ransomware event affecting a customer-facing order-processing server. The asset (including data and revenue-generating function) is valued at $800,000. Threat intelligence and past incidents indicate that a successful ransomware event would render approximately 60% of the asset's value unrecoverable before restoration. The analyst estimates the event is likely to occur once every four years. What is the correct value the analyst should record as the annualized loss expectancy (ALE) for this risk?

Reviewed for accuracy · Report an issueNext question