a. Use the following facts to assess the time-based model of security for the ABC Company; how well does the existing system protect ABC? Assume the best. average-, and worst-case estimates are independent for each component of the model. - Estimated time that existing controls will protect the system from attack is 14 minutes (worst case), 18 minutes (average case), and 22 minutes (best case) - Estimated time to detect that an attack is happening 56 minutes (best case), 9 minutes (average case) and 12 minutes (worst case) - Estimated time to respond to an attack once it has been detected is 5 minutes (best case), 10 minutes (average case), and 15 minutes (worst case) b. The company is considering investing an additional $100,000 to improve its security. Given the following possibilities, which single investment would you recommend? Explain your answer. - An investment of $100,000 in better perimeter defenses would change the estimates for protection time to 20 minutes (worst case), 24 minutes (average case), and 30 minutes (best case). - An investment of $100,000 in better detection systems would change the estimates for detection time to 3 minutes (best case), 5 minutes (average case). and 8 minutes (worst case). (worst case)