INS 2025 - Tutorial 3 Chapter 8: Securing Information Systems ***Exercise 8.1: MIS excel p. 352 Improving Decision Making: Using Spreadsheet Software to Perform a Security Risk Assessment Software skills: Spreadsheet formulas and charts Business skills: Risk assessment This project uses spreadsheet software to calculate anticipated annual losses from various security threats identied for a small company. Mercer Paints is a small but highly regarded paint manufacturing company located in Alabama. The company has a network in place linking many of its business operations. Although the rm believes that its security is adequate, the recent addition of a Web site has become an open invitation to hackers. Management requested a risk assessment. The risk assessment identied a number of potential exposures. These exposures, their associated probabilities, and average losses are summarized in the following table. MERCER PAINTS RISK ASSESSMENT EXPOSURE PROBABILITY OF AVERAGE LOSS OCCURRENCE Malware attack $75,000 $70,000 Embezzlement $30900 $25,000 Threats from hackers 95% $90,000