Which of the following is used to calculate the impact to an organization per cybersecurity incident?

Annual Loss Expectancy (ALE) estimates the total expected loss over a year from security incidents. While important for understanding overall risk, ALE aggregates multiple incidents rather than focusing on the impact of a single event, making it less relevant for calculating the specific impact from one cybersecurity incident.

Annual Rate of Occurrence (ARO) represents the expected frequency of a specific incident occurring within a year. While ARO is crucial for calculating ALE, it does not provide direct insight into the financial impact of a single incident on an organization. Therefore, it does not serve the purpose of calculating the impact per incident.

Service Level Agreement (SLA) defines the expected level of service between a service provider and a client, often including response times and availability metrics. SLAs do not address the financial impact of cybersecurity incidents; instead, they focus on service performance expectations, making them irrelevant to incident impact calculations.