-2
votes
0answers
16 views

Define (i) Risk exposure metric and (ii) Web abuse metric [closed]

In Information Security Risk Assessment how would we define (i) Risk exposure metric (ii) Web abuse metric
5
votes
2answers
1k views

Annual Rate of Occurrence (ARO) and Exposure Factor (EF) Data

I'm calculating loss expectancy (SLE/ALE) but where or how does one get data on annual rates of occurrences for various things? From simple hard-drive failure rates to something complex like the ...