Has anyone tried to implement quantitative risk analysis, as in, "expressed in €", and a related ROI calculation, to their Jira based risk management process and risk register?
Looking through all the available fields they seem all to be for qualitative risk analysis.
Fields for quantitative risk analysis seem to be missing:
- Asset Value (AV)
- Exposure Factor (EF)
- Secondary Cost (SC)
- Single Loss Expectancy (SLE)
- Annualized Rate of Occurrence (ARO)
- Annualized Loss Expectancy (ALE)
- Cost of Control (CoC)
- Return On Investment (ROI)
And if I would create custom fields for those, can Jira "do the math" and automatically calculate the relate formulas?
AV x EF + SC = SLE
SLE x ARO = ALE
(ALE - CoC) / CoC = ROI