Quantitative risk assessment

Definition
Quantitative risk assessment is

"[a] risk assessment that requires the use of actual numbers, calculations of ALE, and mathematical probabilities to characterize the anticipated likelihood and extent of harm to automated information resources."