i. Risk assessment (assets identification, assets characterization, threat identifications) ii. Quantitative Risk Analysis (SLE, ARO, ALE) iii. Cost-Effectiveness Analysis iv. Suggest which of the solutions your company should go for
A company named SALT loses at least 100 meters of their twisted pair cables every month, to thieves who come at night to cut them after they have closed. During your assessment, you realized that each meter of these cables is sold at 250 cedis which also includes clamping and installation cost. The exposure factor for this asset is pegged at 55%. After some inquiries, they received proposals from two different companies, all suggesting solutions to the problems.
Company A suggests that the SALT changes from the use of twisted pair cables, which are easier to cut and steal, and used fiber optic cables, which are quite difficult to cut, at least the tools for cutting may not be that common. The cost for cables and whole installations would cost SALT 1,200,000 cedis for the next 5 years.
Company B also suggests that SALT move completely to the wireless network, with network devices, installed indoors to prevent easy access to them. The change over and all its installations would cost SALT 942,000 cedis for the next 5 years.
Company C, a security company suggested hiring at least two security men and install CCTV
cameras at vantage points to prevent further attacks on SALT. The CCTV cameras installations together with the cameras and their management would cost the organization 120,000 cedis per year and each of the security men is to be paid 450 cedis a month. Perform the following tasks and suggest with supporting facts which mitigation plan should be followed and why.
i. Risk assessment (assets identification, assets characterization, threat
identifications)
ii. Quantitative Risk Analysis (SLE, ARO, ALE)
iii. Cost-Effectiveness Analysis
iv. Suggest which of the solutions your company should go for.
Step by step
Solved in 2 steps
