Annual Loss Expectancy Analysis
Small Business Reality Check
Help small business owners understand how even a low-probability event can have a large Annual Loss Expectancy (ALE).
Use Case: A small retailer thinks "Hackers won't target me." Select your sector (Retail), set your asset value and exposure factor (how much you'd lose without backups), and the tool will compute SLE and ALE — producing an executive-ready report.
Business Parameters
$
%
100% = no backups; 50% = partial recovery possible
$
Leave blank to use sector AvgBreachCost
years⁻¹ — populated from sector data by default
BCDR Strategy
Controls Checklist (PPT Framework)
Multi-Factor Authentication
Technology control — reduces attack surface significantly
ARO −50%
Staff Phishing Training
People control — reduces human error incidents
ARO −20%
Succession Planning
Procedure control — reduces downtime cost
Downtime −10%
Include DR annual cost in ROSI calculation
SLE
—
Single loss expectancy
ALE Inherent
—
Before controls
ALE Residual
—
After controls
ROSI
—
Return on security invest.
Detailed Results
| CalcSingle Loss Expectancy (SLE) | — |
| CalcALE — Inherent (before controls) | — |
| CalcALE — Residual (after controls) | — |
| InfoExpected Annual Breach Cost | — |
| InfoSelected BCDR Strategy | — |
| CalcDowntime Loss — Cold Site (baseline) | — |
| CalcDowntime Loss — Selected Strategy | — |
| CalcMoney Saved by BCDR | — |
| InfoCost of Controls (DR + selected) | — |
| CalcROSI | — |
Inherent vs Residual Risk (ALE)
Inherent
Residual
Sensitivity: ALE vs Exposure Factor (EF)
Sensitivity: ALE vs ARO
ALE Report — Inputs & Summary
🛡
Risk Calculator
Small Business Reality Check — ALE Report
Input Parameters
| Sector | — |
| Asset Value | — |
| Exposure Factor (EF) | — |
| Annualized Rate of Occurrence (ARO) | — |
| Sector Avg. Breach Cost | — |
| Sector Downtime Cost / hour | — |
Analysis Results
| SLE (Asset × EF) | — |
| ALE Inherent | — |
| ALE Residual | — |
| ROSI | — |
| Recommendation | — |