A security control for this situation has been proposed. The development and implementation cost of this control is $$100,000.$ Once this control is in operation, the realized attack by the same type of threat will be reduced to occur once in ten years and the realized attack will result in a $15\%$ loss of the server$$s value.

The annual cost of ru

nning and maintaining this security control is $$50,000.$