$88\mathrm{.}2\%$ complete

Question

The IT department at a multinational organization is conducting a risk analysis for its new network infrastructure project. This analysis involves identifying potential vulnerabilities, estimating potential downtime, and quantifying the financial impact of cyberattacks. Based on these activities, which type of risk assessment would best suit the organization's requirements?