Question:

Tim is evaluating the possibility of a technological attack on his company. He calculates that the attack has a 10% chance of occurring each year. What kind of metric is this?