Table 4.

Quantitative Vs Qualitative Analysis

	Quantitative Method	Qualitative Method
ADVANTAGES	Quantitative approach calculates numeric values associated to risk impact, risk probability and risk level; Provides a measurement of the impacts’ magnitude, which can be used in the cost-benefit analysis of recommended controls; Its result is more objective and accurate (it obtain more accurate image of risk), appears to be more easily understood by policy makers and others, gives the perception of ease and rapidity in achievement.	Prioritizes the risks and identifies areas for immediate improvement in addressing the vulnerabilities; Allow the determination of areas of greater risk in short time and without bigger expenditures; Analysis is relatively easy and cheap; Allows the covered entity to measure all potential impacts, whether tangible or intangible. For example, an intangible loss, such as a loss of public confidence or loss of credibility, can be measured using a high, medium or low scale.
DISADVANTAGES	Depending on the numerical ranges used to express the measurement, the meaning of the quantitative impact analysis may be unclear, requiring the result to be interpreted in a qualitative manner; It would require great attention to the accuracy of data that measure the risk; The risks that are measured would be limited to the availability of the quantitative data in hand; intangible consequences of risks such as bad reputation or negative media coverage can be problematic; Analysis conducted with application of those methods is generality more expensive, demanding greater experience and advanced tools.	It does not provide specific quantifiable measurements of the magnitude of the impacts, therefore making a cost-benefit analysis of any recommended controls difficult; Achieved results have general character, approximates, etc.