Which of the following is used to calculate the impact to an organization per cybersecurity incident?
Choose an answer
Tap an option to check your answer.
Correct answer: SLE.
Why this is the answer
The correct answer is SLE (Single Loss Expectancy). SLE is a monetary value that represents the cost of a single occurrence of a risk event. It is calculated by multiplying the asset value (AV) by the exposure factor (EF), where EF is the percentage of loss an asset would incur if a specific threat is realized. This directly calculates the impact per incident. ALE (Annualized Loss Expectancy) is incorrect because it represents the expected monetary loss for an asset over a year, not per incident. It's calculated as SLE x ARO. ARO (Annualized Rate of Occurrence) is incorrect because it is the estimated frequency with which a threat is expected to occur in a year, not a measure of financial impact. SLA (Service Level Agreement) is incorrect because it is a contract between a service provider and a customer that defines the level of service expected, not a financial calculation of risk impact.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed