Misplaced Pages

Exposure factor

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
For exposure factor in photography, see exposure value.

Exposure factor (EF), in risk management, is the subjective, potential percentage of loss to a specific asset if a specific threat is realized. It is usually applied in IT risk assessment, but may be applied to quantifying business risk more generally.

Per formula: S i n g l e   l o s s   e x p e c t a n c y   ( S L E ) = A s s e t   v a l u e   ( A V )   ×   E x p o s u r e   f a c t o r   ( E F ) {\displaystyle {Single\ loss\ expectancy\ (SLE)}={Asset\ value\ (AV)\ }\times {\ Exposure\ factor\ (EF)}}

The exposure factor is usually a subjective value that the person assessing risk must define. It is represented in the impact of the risk over the asset, or percentage of asset lost. As an example, if the asset value is reduced two thirds, the exposure factor value is 0.66. If the asset is completely lost, the exposure factor is 1.0.

References

  1. Mike Tierney (2023).Annual loss expectancy and quantitative risk analysis, Netwrix
  2. Volkan Evrin (2021). Risk Assessment and Analysis Methods: Qualitative and Quantitative, ISACA
  3. Exposure factor definition, capital.com
Stub icon

This business term article is a stub. You can help Misplaced Pages by expanding it.

Categories:
Exposure factor Add topic