Question: (a) Why is it a problem if benefits and costs both occur over several years? (b) Why should the total cost of an incident (TCI)

(a) Why is it a problem if benefits and costs both occur over several years?
(b) Why should the total cost of an incident (TCI) be used in place of exposure factors and asset values?
(c) Why is it not possible to use classic risk analysis calculations for firewalls?
(d) What is the worst problem with the classic approach?
(e) Why is hard-headed thinking about security ROI dangerous?

Step by Step Solution

3.39 Rating (177 Votes )

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock

a When there are uneven cash flows over a number of years decision makers turn to discounted cash fl... View full answer

blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Document Format (1 attachment)

Word file Icon

883-C-S-S-A-D (2747).docx

120 KBs Word File

Students Have Also Explored These Related Systems Analysis And Design Questions!