Qualitative risk

This method of risk analysis is more useful in a scalable environment where assets keep growing. It may be difficult to use the quantitative method here because the calculations never end.

The good thing about qualitative risk analysis is that it can be implemented regardless of the size of the business or the assets that have to be protected. Further, this method has more descriptive scales of risk analysis, such as low, medium, or high, instead of analytical analysis. For these scales to be defined, a tool called the risk assessment matrix could be used. The analysis is also done based on the attributes and instincts of the organization's top management; that is, every organization base in their assets level and scaling factor can define the scale of the risk.