#1

Calculate the EF, SLE, ARO, and ALE for each threat category listed.

ABC Software Company, major threats categories for new applications development

Asset value: $ 1,100,000.00

Cost per Incident

Frequency of Occurrence

EF

SLE

ARO

ALE

Programmer Mistakes

$ 5,000.00

1 per week

52

Loss of Intellectual Property

$ 65,000.00

1 per year

1

Software Piracy

$ 500.00

1 per week

52

Theft of Information (Hacker)

$ 2,500.00

1 per quarter

4

Theft of Information (Employee)

$ 5,000.00

1 per 6 months

2

Web Defacement

$ 500.00

1 per month

12

Theft of Equiptment

$ 5,000.00

1 per month

12

Viruses, Worms, Trojan Horses

$ 1,500.00

1 per week

52

Denial-of-Service Attack

$ 2,500.00

1 per quarter

4

Earthquake

$ 250,000.00

1 per 10 years

0.1

Flood

$ 250,000.00

1 per 10 years

0.1

Fire

$ 500,000.00

1 per 10 years

0.1

#2

How did the ABC Software Company arrive at the values in the table in Exercise 1?

For each entry, describe the process (not the formula) of determining the exposure factor

and the frequency of occurrence.

#3	How did the ABC Software Company arrive at the values in the table in Exercise 1?
	For each entry, describe the process (not the formula) of determining the exposure factor and the frequency of occurrence.
	ABC Software Company, major threats categories for new applications development
	Asset value: $ 1,100,000.00
		Cost per Incident	Frequency of Occurrence	Cost of Controls	Type of Control
	Programmer Mistakes	$ 5,000.00	1 per month	$ 20,000.00	Training
	Loss of Intellectual Property	$ 65,000.00	1 per 2 year	$ 15,000.00	Firewall/IDS
	Software Piracy	$ 500.00	1 per month	$ 25,000.00	Firewall/IDS
	Theft of Information (Hacker)	$ 2,500.00	1 per 6 months	$ 15,000.00	Firewall/IDS
	Theft of Information (Employee)	$ 5,000.00	1 per year	$ 15,000.00	Physical Security
	Web Defacement	$ 500.00	1 per quarter	$ 10,000.00	Firewall
	Theft of Equiptment	$ 5,000.00	1 per 6 months	$ 15,000.00	Physical Security
	Viruses, Worms, Trojan Horses	$ 1,500.00	1 per month	$ 15,000.00	Antivirus
	Denial-of-Service Attack	$ 2,500.00	1 per 6 months	$ 5,000.00	Firewall
	Earthquake	$ 250,000.00	1 per 10 years	$ 5,000.00	Insurance/Backups
	Flood	$ 50,000.00	1 per 10 years	$ 10,000.00	Insurance/Backups
	Fire	$ 100,000.00	1 per 10 years	$ 10,000.00	Insurance/Backups
#4	Assume the costs of controls presented in the table for Exercise 3 were unique costs directly associated with
	protecting against that threat. In other words, dont worry about overlapping costs between threats. Calculate the
	CBA for each control. Are they worth the costs listed? Explain your answers.