A small computer network solutions company is analyzing their risks. The risk events, occurrence and detectability are given below.

Table $1$: Likellhood of Occurrence $($Probability$)$

Table $2$: Countermeasure costs

Anti$-$virus $\backslash (\backslash$$ $1,000\backslash )$

Firewall $\backslash (\backslash$$ $2,000\backslash )$

Intrusion detection system $\backslash (\backslash$$ $600\backslash )$

Training $\backslash$& education $\backslash (\backslash$$ $1,500\backslash )$

Uninterrupted power system $\backslash$$$2,500$

Active directory $\backslash (\backslash$$ $1,000\backslash )$

Back$-$up server $\backslash (\backslash$$ $1,200\backslash )$

Spam filtering $\backslash (\backslash$$ $500\backslash )$

Network access control $\backslash$$$2,200$

E $-$mail policy enforcement $\backslash (\backslash$$ $2,000\backslash )$

a$.$ Calculate the rlsk value for each risk event

b$.$ What risk event has the highest priority?

c$.$ What response plan should you have in$-$place to minimize the highest risk event? $($must be specific, just saying, 'minimize it$\text{'}$ is not sufficient. $($refer to the counter measure costs table $2$ above$)$