An application server for an e$-$commerce system has the asset value $($AV$)$ of $$2,000,000$ and, on average, $.$ a realized attack by a threat on the server will result in an estimated total loss of $30\%($Exposure Factor$)$ of the server's value. Prior research has suggested that this type of attack may occur once in $2$ years.

After the development and implementation of a $$30,000$ worth security control system$/$module for the server, the realized attack will be reduced to occur once in $5$ years and the realized attack will result in a $10\%$ loss of the server's value. The annual cost of maintaining and running the security control system is $$10,000.$

Conduct a cost$-$benefit analysis for its first year of this proposal$/$project and find out its AV$,$ EF$,$ SLE, ARO, ALE, ACS, CBA, and ROSI.