Glossary: Governance, Risk and Compliance

exposure factor (EF)

Also written: EF, exposure

The share of an asset's value lost in one incident, from 0% to 100% and written as a decimal from 0 to 1. Backups mean ransomware would cost about half the file server's value, so EF is 0.5.