CIS608: Mesusa Corporation - Calculate ARO, ALE, and CBA

profilekartiukt18
mesusa-controls.xlsx

Sheet1

NAME:
SLE (Pre) Frequency (Pre) ARO (Pre) ALE (Pre) SLE (Post) Frequency (Post) ARO (Post) ALE (Post)
Programmer Mistakes $2,000 1 per week $2,000 1 per month
Loss of Intellectual Property $75,000 1 per year $75,000 1 per 2 year
Software Piracy $700 1 per week $700 1 per year
Theft of Information (External) $2,000 1 per quarter $2,000 2 per year
Theft of Information (Internal) $6,000 2 per year $6,000 1 per year
Web Defacement $500 1 per month $500 1 per quarter
Theft of Equipment $5,000 1 per year $5,000 1 per 2 year
Viruses, Worm, Trojan Horses $1,000 1 per week $1,000 1 per month
DoS Attack $1,500 1 per month $1,500 2 per year
Earthquake $250,000 1 per 20 years $5,000 1 per 20 year
Flood $250,000 1 per 10 years $5,000 1 per 10 year
Fire $500,000 1 per 10 years $5,000 1 per 10 year
Cost of Control Type of Control CBA
Programmer Mistakes $20,000 Training
Loss of Intellectual Property $25,000 Firewall/IDS
Software Piracy $25,000 Firewall/IDS
Theft of Information (External) $25,000 Firewall/IDS
Theft of Information (Internal) $5,000 Phys. Security
Web Defacement $10,000 Firewall
Theft of Equipment $11,000 Phys. Security
Viruses, Worm, Trojan Horses $15,000 Antivirus
DoS Attack $10,000 Firewall
Earthquake $5,000 Insurance/Backup
Flood $10,000 Insurance/Backup
Fire $10,000 Insurance/Backup

1

2

3

4

5

6

A

B

NAME:

SLE

(Pre)

Programmer Mistakes

$2,000

Loss of Intellectual Property

$75,000

Software Piracy

$700

Theft of Information (External)

$2,000