Rebound Security's domain controller has an asset value $($AV$)$ of $$350,000.$ It is estimated that it will have a successful risk event every four years with an expected data loss of $90\%.$ Investing in an additional security control for $$100,000$ will reduce the expected data loss to $25\%.$ How long would the security control need to be implemented before it was cost$-$effective?