<!-- {{unreferenced|date=January 2010}} --> {{for|exposure factor in photography |exposure value}} '''Exposure factor''' (EF), in risk management, <ref>Mike Tierney (2023).[https://blog.netwrix.com/2020/07/24/annual-loss-expectancy-and-quantitative-risk-analysis/ Annual loss expectancy and quantitative risk analysis], Netwrix </ref><ref>Volkan Evrin (2021). [https://www.isaca.org/resources/isaca-journal/issues/2021/volume-2/risk-assessment-and-analysis-methods Risk Assessment and Analysis Methods: Qualitative and Quantitative], ISACA</ref> is the subjective, potential percentage of loss to a specific asset if a specific threat is realized. It is usually applied in IT risk assessment, but may be applied to quantifying business risk more generally. <ref>[https://capital.com/exposure-factor-definition Exposure factor definition], capital.com</ref>
Per formula: <math display="block"> {Single\ loss\ expectancy\ (SLE)} = {Asset\ value\ (AV)\ } \times {\ Exposure\ factor\ (EF)}</math>
The exposure factor is usually a subjective value that the person assessing risk must define. It is represented in the impact of the risk over the asset, or percentage of asset lost. As an example, if the asset value is reduced two thirds, the exposure factor value is 0.66. If the asset is completely lost, the exposure factor is 1.0. ==References== {{Reflist}}
Category:IT risk management Category:Risk management in business Category:Risk management
{{business-term-stub}}