Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

Quantitative risk assessments are valued for their objectivity and their ability to produce concrete, numerical results. By using measurable data for asset values, threat frequencies, and control effectiveness, they calculate risk in specific monetary terms (e.g., Annualized Loss Expectancy). This numerical output is a significant advantage as it supports a clear cost-benefit analysis for proposed security controls and facilitates communication with business leaders by framing risk in financial language they understand.

B. This describes the characteristics of qualitative risk assessments, which are subjective and generally faster to perform.
C. The goal of quantitative analysis is to produce specific "real numbers" for precise financial analysis, not just general "approximates."
D. This statement is contradictory. The core nature of quantitative assessment is its objectivity, not subjectivity.

- National Institute of Standards and Technology (NIST). (2012). Special Publication 800-30 Revision 1: Guide for Conducting Risk Assessments. Section 2.3.2 notes that quantitative assessment "is less subjective and provides a measurement of the impact in monetary terms."

- Peltier, T. R. (2010). Information Security Risk Analysis, Third Edition. Auerbach Publications. (Peer-reviewed academic text). Chapter 5, "Quantitative Risk Analysis," states, "The primary advantage of a quantitative risk analysis is that the results are in a dollar value, which is understood by management." DOI: https://doi.org/10.1201/EBK1439839560