Qualitative, which do not operate on numerical data, presenting results in the form of descriptions, recommendations, where risk assessment risk is connected assets’ value, determination of
qualitative scales for the frequency of threat occurrence and
susceptibility for a given threat or threat scenarios by prediction of the main risk factors.