Basing on the "Making Information Risk Mitigation Decisions" Case by Professors Hans Brechbhl, Stephen Powell and Chris Dunning from Tuck School of Business at DartmouthGlassmeyer/McNamee Center for Digital Strategies. Answer the following questions:

Q1) A brief summary of the case, detailing the team's assessment of the current situation, and definition of problems, issues, and opportunities

Q2) Any analysis, conclusions, and recommendations for action. This section defends your definition of the problem and sets up the case for your answers to questions and/or recommended solutions by drawing references from the case facts and data.

Q3 a) For each of the four (4) topics (e.g.; Laptop Encryption, Malware Protection, Website Fraud Prevention, and Employee PII Protection) take position of Mary, what solution would you recommend and why?

b) Prioritize team recommendations (E.g.; rank them highest to lowest) and explain rationale of ordering.

c) Build and submit an Excel spreadsheet, as a separate file, which provides calculations supporting recommendations presented. Spreadsheet should be professional in presentation, clearly labeled, and act as the quantitative analysis of options presented.

Assumptions for Question 3 are as follows:

1. At the time of case, most software was available for purchase. Thus, price of encryption software is its one-time purchase cost, not an annual subscription fee.
2. Some costs and some benefits are likely one-time and others recurring.
3. Revenue is another term for sales. It is gross inflow in to a company; it is 'top line' in income statements and is often called "Sales." To calculate income or profit, companies then subtract a number of costs. These costs include actual cost of product (referred to as Cost of Goods Sold), salaries, rent, utilities, interest, taxes, and other items. The 'bottom line' (income or profit) is usually expressed as a percentage of sales and is often called "margin".

Q4) Add appendices as needed to support analysis and/or answers.

Answer rating: 100% (QA)

Q1 Summary of the Case The case Making Information Risk Mitigation Decisions discusses a team tasked with assessing and mitigating risks related to information security at a fictional company The team ... View the full answer