Two ways to say "this is bad"
A manager looks at two risks. One is marked red. The other costs 6000 pounds a year.
Both say the risk is serious, but in different ways. One uses a colour. The other uses money.
Today you learn when to use each.
By the end of this lesson
Note
I can rate a risk with a RAG colour and work out its yearly cost.
Key words
| Word | What it means | Example |
|---|---|---|
| Qualitative | described in words or colours, not in numbers | |
| Quantitative | measured with numbers | |
| RAG rating | red, amber or green: a colour for how serious a risk is | |
| SLE | single loss expectancy: the cost of one loss | 2000 pounds |
| ARO | annual rate of occurrence: how many times a year it happens | 3 |
| ALE | annual loss expectancy: the expected cost in one year | |
| CVSS | a score from 0 to 10 for how serious a software flaw is |
The cells students fill in are left blank in this preview.
Starter
Have a go
Starter
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Qualitative: red, amber, green
A qualitative rating uses no numbers. It uses a RAG rating, like traffic lights.
Red is high risk. Act at once. Amber is moderate risk. Watch it closely. Green is low risk. No action is needed now.
What each colour asks for
| Colour | Level of risk | What you do |
|---|---|---|
| Red | High | Immediate action |
| Amber | Moderate | Observe closely |
| Green | Low | No immediate action |
The cells students fill in are left blank in this preview.
Check
Have a go
Check
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.