a. Comment on the statement, “The goal of security is to eliminate risk.”

3a.) The goal of security is to eliminate risk.

a. True

b. False

b. What is risk analysis?

3b.) Balancing threats against protection costs is called _______.

a. Economic justification

b. Risk analysis

c. Comprehensive security

d. The Illusion of Cost

c. Repeat the risk analysis in Figure A-3, this time with Countermeasure C reducing damage severity by a quarter and the likelihood of an attack by 75%. The annual cost of Countermeasure C is $175,000. Show your calculations like the table does.

d. What do you conclude? Justify your answer.