Why is it difficult to conduct a qualitative risk assessment for an it infrastructure?

Conducting a qualitative risk assessment for IT infrastructure is challenging due to the complexity and interdependence of various components, which can obscure potential vulnerabilities. Additionally, the dynamic nature of technology and evolving cyber threats make it difficult to predict and quantify risks accurately. Furthermore, subjective judgments about risk likelihood and impact can lead to inconsistencies and biases in the assessment process. Lastly, gathering comprehensive and accurate qualitative data from diverse stakeholders can be time-consuming and may result in incomplete insights.