Question: (a) Why is it a problem if benefits and costs both occur over several years? (b) Why should the total cost of an incident (TCI)
(b) Why should the total cost of an incident (TCI) be used in place of exposure factors and asset values?
(c) Why is it not possible to use classic risk analysis calculations for firewalls?
(d) What is the worst problem with the classic approach?
(e) Why is hard-headed thinking about security ROI dangerous?
Step by Step Solution
3.39 Rating (177 Votes )
There are 3 Steps involved in it
a When there are uneven cash flows over a number of years decision makers turn to discounted cash fl... View full answer
Get step-by-step solutions from verified subject matter experts
Document Format (1 attachment)
883-C-S-S-A-D (2747).docx
120 KBs Word File
