Suppose XYZ Software Company faces the threats given in the following table. Using the table, calculate the ARO and ALE for each threat category that XYZ Software Company faces. Threat Category Cost per Incident (SLE) Frequency of Occurrence Programmer mistakes $5,000 1 per week Loss of intellectual property $75,000 1 per year Assume a year has passed and XYZ has improved security by applying a number of controls. Using the information from the following table, calculate the post-control ARO and ALE for each threat category listed. Cost per Frequency of Incident Cost of Threat Category Type of Control Occurrence Control Programmer mistakes $5,000 1 per month $20,000 Training Loss of intellectual property $75,000 1 per 2 years $15,000 Firewall/DS Calculate the Cost Benefit Analysis (CBA) for each threat category. For each threat category, determine if the proposed control is worth the costs.

Suppose XYZ Software Company faces the threats given in the following table. Using the table, calculate the ARO and ALE for each threat category that XYZ Software Company faces. Threat Category Cost per Incident (SLE) Frequency of Occurrence Programmer mistakes $5,000 1 per week Loss of intellectual property $75,000 1 per year Assume a year has passed and XYZ has improved security by applying a number of controls. Using the information from the following table, calculate the post-control ARO and ALE for each threat category listed. Cost per Frequency of Incident Cost of Threat Category Type of Control Occurrence Control Programmer mistakes $5,000 1 per month $20,000 Training Loss of intellectual property $75,000 1 per 2 years $15,000 Firewall/DS Calculate the Cost Benefit Analysis (CBA) for each threat category. For each threat category, determine if the proposed control is worth the costs.

Computer Networking: A Top-Down Approach (7th Edition)

7th Edition

ISBN:9780133594140

Author:James Kurose, Keith Ross

Publisher:James Kurose, Keith Ross

Chapter1: Computer Networks And The Internet

Section: Chapter Questions

Problem R1RQ: What is the difference between a host and an end system? List several different types of end...

See similar textbooks

Related questions

Q: Assume that the computer system has performed all required steps to get a program ready for…

A: Let's discuss each of them in turn. Defining the problemLet's say you are contacted as a programmer…

Q: Draw the associations that are described by the business rules below. Include the multiplicities for…

A: Draw the associations that are described by the business rules below. Includethe multiplicities for…

Q: Normalise the following table named 'PROPERTY' to remove modification anomalies showing all steps…

A: 1NF(All attributes should be atomic) Composite Primary key : ClientNo,PropertyNo ClientNo…

Q: Suppose your company calculates the SLE for employee hard drive theft to be $200 and the ARO is 2.…

A: SLE is short for Single Loss Expectancy and it is the amount an organization expects to lose from a…

Q: Given SS = 0.75, S1 = 0.4, and Site Class C, find SDS (use the tables in the book and make no…

A: Solution 1: To find SDS for Site Class C, we need to use Table 11.4-1 from the "Seismic Design…

Q: Requirements Read: "Enduring and volatile requirements" :…

A: Solution Enduring requirements These are relatively stable requirements that derive from the core…

Q: Use the ER Diagram shown on Figure 1 to answer question 9: 9. According to the ER diagram on Figure…

A: Reasons: A) employee only track using employee ID. B) Departments only track using department ID. D)…

Q: Which of the following Crow's Foot symbols can be placed at the location pointed to by the arrow in…

A: When constructing a diagram using the Crow's Foot notation, it is important to select the correct…

Q: An EMPLOYEE has only one JOB_CODE, but a JOB_CODE can be held by many EMPLOYEEs. An EMPLOYEE can…

A: Step 1:here we will have 3 tables namely EMPLOYEE, JOB and PLAN. The relationship between EMPLOYEE…

Q: You are considering the purchase of a new home offered at a price of $225,000. Create an…

A: According to the information given:- We have to follow the instruction to get the desired outcome.

Q: Note: Terry’s phone is not available in the evidence. However, several files that originated from…

A: Two ways of working the scenario are as a disk forensics exercise (students are provided with disk…

Q: Dept. Dept. # Name 11232 Soap Division 11232 Soap Division Location Mgr. Mgr. Tel Name ID Mary…

A: Introduction of 3NF: 3NF (Third Normal Form) is a database normalization technique that is used to…

Q: Consider these factors while determining the sentinel value you want to use.

A: Sentinel value: An algorithm that employs the existence of a sentinel value as a condition for…

Q: How to make a Crow's Foot ERD for the following: Attributes of PROPERTY include Property_ID and…

A: The diagram and relationships correctly represent the scenario described: properties can have…

Q: Let's say we have the attached table : 3. Find the years that company hired more than 5 employees

A: NOTE: - THE NEW SCHEMA IS ASSUMED WITH FOURTEEN RECORDS AS IT WAS NOT PROVIDED.SELECT is used to…

Q: Find the location that has average salary more than 4000 dollars. Usually each location mayhave…

A: SubqueryA subquery is a query within another query. A subquery is a query that is embedded in WHERE…

Q: Consider the following dimensions, dimension attributes, and dimension sizes for Farm…

A: In this question we have to understand about given Farm Coop-Insurance attributes and schema to…

Q: Specify the degree of this relationship (1:1, 1:M, or M:N): The attributes of employee include ID,…

A: In the given scenario, we have two entities: Employee and Project. The relationship between these…

Question

Suppose XYZ Software Company faces the threats given in the following table. Using the table,
calculate the ARO and ALE for each threat category that XYZ Software Company faces.
Threat Category
Cost per Incident (SLE)
Frequency of Occurrence
Programmer mistakes
$5,000
1 per week
Loss of intellectual property
$75,000
1 per year
Assume a year has passed and XYZ has improved security by applying a number of controls.
Using the information from the following table, calculate the post-control ARO and ALE for
each threat category listed.
Cost per Frequency of
Incident
Cost of
Threat Category
Control
Type of Control
Occurrence
Programmer mistakes
$5,000
1 per month
$20,000
Training
Loss of intellectual property
$75,000
1 per 2 years
$15,000
Firewall/DS
Calculate the Cost Benefit Analysis (CBA) for each threat category. For each threat category,
determine if the proposed control is worth the costs.

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

This is a popular solution!

SEE SOLUTION Check out a sample Q&A here

Step 1

Step 2

Step 3

Step 4

Trending now

This is a popular solution!

Step by step

Solved in 4 steps

SEE SOLUTION Check out a sample Q&A here

Similar questions

Given the following case you are to answer the two questions on the following pages. Bob’s Supply (BS) needs to keep track of the parts they have in their inventory. He wants to know the description of each part, the color of each part, how many of each item is in stock [QOH], and how much each part costs him. BS also needs to keep track of who supplies each part, the supplier’s name, contact person, and telephone number. We know that each part in inventory has only one supplier, but some suppliers supply multiple parts to BS. Bob wants each part and each supplier to have assigned an identifying number. 1. Identify the tables needed to design the database and the fields [attributes] needed for each table and the role or function that some attrIbutes take on. 2. Create the database design for this case below using an Entity-Relationship Diagram.
The figure below shows the DFD model for a customer purchasing an electronic article from an online repository as received from a stakeholder. The articleID is a string that uniquely identifies an article. The payment amount and customer name are the data details that are included on the receipt that is emailed to the customer. The payment completer status is a flag that indicates if the payment has been received in full. Your task as the business analyst is to identify and comment on the issues (if any) within the DFD. Be sure to state any necessary assumptions. Receipt data Customer Searches catalog for articleID. "Article" 1 Atricle Database 000 Accept Payment Payment amount Customer Name Generate Receipt Payment complete status Send Customer Thank You message -Article Payment complete status Email Article to Customer
Fact-Finding Summary• A typical center has 300–500 members, with two membership levels: full and limited.Full members have access to all activities. Limited members are restricted to activitiesthey have selected, but they can participate in other activities by paying a usage fee. Allmembers have charge privileges. Charges for merchandise and services are recorded on acharge slip, which is signed by the member.• At the end of each day, cash sales and charges are entered into the BumbleBee accounting software, which runs on a computer workstation at each location. Daily cash receiptsare deposited in a local bank and credited to the corporate Personal Trainer account. TheBumbleBee program produces a daily activity report with a listing of all sales transactions.• At the end of the month, the local manager uses BumbleBee to transmit an accounts receivable summary to the Personal Trainer headquarters in Chicago, where member statements are prepared and mailed. Members mail their payments to…
Use the ER Diagram shown on Figure 1 to answer question 9: 9. According to the ER diagram on Figure 1, which of the following is true? A) For each employee, we will keep track of either the employee name or the unique employee ID. B) For each department, we will keep track of either the unique department ID or the department location. C) Each employee reports to exactly one department. A department may have many employees reporting to it, but it does not have to have any. D) None of the above. Answer: EmpID EmpName EMPLOYEE Reports To Figure 1 DeptID DeptLocation DEPARTMENT
Technology College Muscat hired you as a programmer to automate their manual Student Registration System. The college requires you to develop a C++ program to manage their Students' personal and academic record. You are required to develop a C++ program using C++ structures, arrays, and user defined functions. The college stores each student's full name, a maximum of 30 character long, student's age, numeric student's ID number of 8 digits long, student's modules enrolled and student's module result. You are required to implement 3 different functions, a function to get/input all the data of a student from a user. A function to get/input student's modules and result against each module and to calculate average marks of each students, and a function to display all students' personal and academic data. You are required to demonstrate storing of 5 students and displaying their stored data with average marks. You are also required to calculate and display the overall result analysis for 5…
q29
Target is one of the attributes used to identify an objective. True False
Label each phrase as either interpretation sharing, projection sharing, or fact sharing. Note: each information sharing type is used once. Diesel is leaking from the ship onto the dock. Answer (circle one): interpretation sharing, projection sharing, fact sharing. There is a fire station near the diesel leak. Those firefighters have been trained to respond to small diesel spills. Answer (circle one): interpretation sharing, projection sharing, fact sharing. If the ship leaks more than 10,000 gallons of diesel, then we will need to send in additional firefighters and specialized equipment trucks through Route B. Answer (circle one): interpretation sharing, projection sharing, fact sharing.
Select the characteristics of composition constraints: are used to enforce a quantity that depends on the decision variables are used when a quantity is compared with a fixed value can be an inequality or an equality must use absolute referencing to calculate correctly are used to enforce a proportional relationship
Consider these factors while determining the sentinel value you want to use.