6. Develop a spreadsheet model of the cost of a virus attack in an organization that has three types of computers: employee workstations, data servers, and Web servers. Assume the number of computers affected by the virus depends on the severity of the virus. For the purposes of your model, assume that there are three levels of virus severity: Low-severity incidents affect fewer than 30 percent of the user workstations and none of the data or Web servers. Mediumseverity incidents affect up to 70 percent of the user workstations, up to half of the Web servers, and none of the data servers. High-severity incidents can affect all organizational computers.

Assume 50 percent of the incidents are low severity, 30 percent are medium severity, and 20 percent are high severity.

Assume employees can remove viruses from workstations themselves, but that specially trained technicians are required to repair the servers. The time to eliminate a virus from an infected computer depends on the computer type. Let the time to remove the virus from each type be inputs to your model. Assume that when users eliminate the virus themselves they are unproductive for twice the time required for the removal. Let the average employee hourly labor cost be an input to your model. Let the average cost of a technician also be an input to your model. Finally, let the total number of user computers, data servers, and Web servers be inputs to your model.

Run your simulation 10 times. Use the same inputs for each run, but draw a random number (assume a uniform distribution for all random numbers) to determine the severity type. Then, draw random numbers to determine the percentage of computers of each type affected, using the constraints stated previously. For example, if the attack is of medium severity, draw a random number between 0 and 70 to indicate the percentage of infected user workstations, and a random number between 0 and 50 to indicate the percentage of infected Web servers.

For each run, calculate the total of lost employee hours, the total dollar cost of lost employee labor hours, the total hours of technicians to fix the servers, and the total cost of technician labor. Finally, compute the total overall cost. Show the results of each run. Show the average costs and hours for the 10 runs.