Read the paper "Risk Analysis for Information Technology" carefully. Answer the following questions

1. List the properties that are desirable for any measure (quantitative or qualitative) of loss exposure of IT assets.

2. List all quantitative risk analysis methodologies described in the paper. Briefly describe their advantages and disadvantages.

3. List all qualitative risk analysis methodologies described in the paper. Briefly describe their advantages and disadvantages.

4. Consider the risk analysis method proposed by the authors of this paper. The authors claim that the proposed risk analysis process using a combination of methodologies is more effective than the use of any single methodology. Do you agree with this claim? Explain in details (and preferably with examples). Mention any drawback of the proposed method if you find any.