Learning Objectives Demonstrate knowledge of risk management concepts. Know how to mitigate risk through the use of controls. Analyze the scenario. Apply the knowledge in a scenario. Instruction XYZ Network Solutions provides network services and value-add communications to customers in several countries in Europe and North America. The corporate headquarters is in Miami Florida with offices in Chicago, London, UK and Frankfurt, Germany. The company has a sales division with eight employees led by Andre Wisser, human resources with three employees led by Jane Aubin, Technical and Communications with 45 employees led by Peter ODay. Finance is led by Andrea Worth but most of the Payroll and Finance functions have been outsourced to a SaaS Cloud Provider.

QUESTION: XYZ Network Solutions has contractual agreements (Service Level Agreements) with its customers and regulatory requirements that require it to maintain certain levels of network and service availability. How should these factors be addressed in the risk assessment? Should this be calculated as an quantitative or qualitative risk assessment?