8.6a. Use the following facts to assess the time-based model of security for the ABC Com-pany; how well does the existing system protect ABC? Assume that the best-, aver-age-, and worst-case estimates are independent for each component of the model.Estimated time that existing controls will protect the system from attack = 15minutes (worst case), 20 minutes (average case), and 25 minutes (best case)Estimated time to detect that an attack is happeningminutes (average case) and 10 minutes (worst case)Estimated time to respond to an attack once it has been detected = 6 minutes(best case), 14 minutes (average case), and 20 minutes (worst case)= 5 minutes (best case), 8b. The company is considering investing up to an additional $100,000 to improve its secu-rity. Given the following possibilities, which single investment would you recommend?Which combination of investments would you recommend? Explain your answer.An investment of $75,000 would change the estimates for protection time to19 minutes (worst case), 23 minutes (average case), and 30 minutes (best case).An investment of $75,000 would change the estimates for detection time to2 minutes (best case), 4 minutes (average case), and 7 minutes (worst case).An investment of $75,000 would change the estimates for response time to3 minutes (best case), 6 minutes (average case), and 10 minutes (worst case).• An investment of $25,000 would change the estimates for protection time to17 minutes (worst case), 22 minutes (average case), and 28 minutes (best case).An investment of $25,000 would change the estimates of detection time to 4 min-utes (best case), 7 minutes (average case) and 9 minutes (worst case).An investment of $25,000 would change the estimates for response time to4 minutes (best case), 9 minutes (average case), and 12 minutes (worst case).

The time-based model of security refers to the system is security which emphasis on implementing a…

8.6 a. Use the following facts to assess the time-based model of security for the ABC Com- pany; how well does the existing system protect ABC? Assume that the best-, aver- age-, and worst-case estimates are independent for each component of the model. Estimated time that existing controls will protect the system from attack = 15 minutes (worst case), 20 minutes (average case), and 25 minutes (best case) Estimated time to detect that an attack is happening minutes (average case) and 10 minutes (worst case) Estimated time to respond to an attack once it has been detected (best case), 14 minutes (average case), and 20 minutes (worst case) = 5 minutes (best case), 8 = 6 minutes

8.6 a. Use the following facts to assess the time-based model of security for the ABC Com- pany; how well does the existing system protect ABC? Assume that the best-, aver- age-, and worst-case estimates are independent for each component of the model. Estimated time that existing controls will protect the system from attack = 15 minutes (worst case), 20 minutes (average case), and 25 minutes (best case) Estimated time to detect that an attack is happening minutes (average case) and 10 minutes (worst case) Estimated time to respond to an attack once it has been detected (best case), 14 minutes (average case), and 20 minutes (worst case) = 5 minutes (best case), 8 = 6 minutes

FINANCIAL ACCOUNTING

10th Edition

ISBN:9781259964947

Author:Libby

Publisher:Libby

Chapter1: Financial Statements And Business Decisions

Section: Chapter Questions

Problem 1Q

See similar textbooks

Similar questions

Seidsmong ed liw onon aysh bajosios vimobnsi à to Juo ferit vtilidadorq adi ai tsrW Task 2: Assume that a risk manager estimates the following probabilities of various losses for a certain risk: Amount of Loss, EUR Probability of Loss 0.40 0.60 225 350 1. Given the probability distribution, find the expected loss.
250 words. Discuss three factors that might indicate the going concern assumption may be at risk? What audit procedures would detect these factors?
Please Solve in 20mins
Question 7 Z scores are: A. Used to evaluate the quality of imaged files B. Used to identify outliers in data C. A fraud score based on ISO standards D. Issued by the SEC to identify public companies that are experiencing risk assurance problem ReplyForward
Distinguish between errors and irregularities. Which do you think concern the auditors the most? 3. Distinguish between errors and irregularities. Which do you think concern the auditors the most? 4. Compare and contrast the following disaster recovery options: empty shell, recovery operations center, and internally provided backup. Rank them from most risky to least risky, as well as most costly to least costly . 5. Auditors examine the physical environment of the computer center as part of their audit. Many characteristics of computer centers are of interest to auditors. What are they? Discuss. 6. What is a disaster recovery plan? What are the key features? 7. What are some typical problems with passwords? 8. What are biometric devices? 9. In a distributed data processing system, a database can be centralized or distributed. What are the options? Explain. 10. Explain the role of accountants in the conceptual design stage. 11. Explain why the Systems Development Life Cycle is of…
4. Many organizations implement assurance layering strategies to mitigate the risks they face to acceptable levels. One such strategy is the Three Lines of Defense model. a. Describe the first and second lines of defense included in this model. b. Explain what distinguishes the third line of defense from the first two. c. Discuss how the three lines of defense are coordinated. d. Identify the external sources of assurance that organizations use to augment their internal lines of defense.
1.
General Controls. Indicate the benefits of each of the following examples of general controls. a. Echo checks are designed and built into the computer by the manufacturer.b. The company schedules regular maintenance on its computer hardware.c. The company involves users in its design of programs and selection of prepackaged software and programs.d. New programs are tested and validated prior to being implemented.e. Documentation is required prior to modifying existing programs using “emergency”change orders.f. The duties of system analysts, programmers, and computer operators are appropriatelyseparated.g. Appropriate backup and data retention policies are implemented.h. The access rights granted to employees are periodically reviewed and evaluated, giving consideration to known changes resulting from promotions and transfers within the company.
Consider the following four statements about value at risk (VaR): The choice of VaR confidence interval and time horizon should be uniform across users. There is not much uniformity of practice as to confidence interval and time horizon; as a result, intuition on what constitutes a large or small VaR is underdeveloped. There are a number of computational and modeling decisions that can greatly influence VaR results, such as the length of time series used for historical simulation or to estimate moments; and the technique used for estimating moments. There are a number of computational and modeling decisions that can greatly influence VaR results, such as mapping techniques and the choice of risk factors. Which of the above statements is/are true?
When evaluating a potential new information system using the systems development life cycle approach, which study describes the process in which the organization's current system is analyzed to determine whether a new system is needed or can be repair the existing system? a. Systems design and development. b. Systems evaluation and maintenance. c. System analysis. d. Systems research and feasibility.