Describe to a CIO of a hypothetical Fortune 500 company what the differences are between qualitative and quantitative risk. Inform him/her of three areas in which there must be a focus for risk management and the threshold that may or may not be acceptable. Use pages in this chapter as a guideline on the impact, probability, and levels of acceptable risk.