What does the term Exposure Factor (EF) refer to in risk management?

• A. The probability of a risk event.
• B. The cost of mitigating a risk.
• C. The percentage of asset loss that would occur if a specific risk event were to happen.
• D. The time to recover.

Answer: (C)

Exposure Factor describes the portion of an asset’s value that would be lost if a specific risk event occurs. It’s expressed as a percentage of the asset value and represents the potential magnitude of loss, not how likely the event is or the cost to prevent it or the time to recover. For example, if an asset is valued at $100,000 and the EF is 40%, the potential loss would be $40,000. This factor is used with the asset value to calculate the Single Loss Expectancy (SLE) as SLE = Asset Value × EF. If you also know how often the event is expected to happen, you multiply by the annualized rate of occurrence to get the Annualized Loss Expectancy (ALE).