Calculate CBA for each control. Indicate $($yes$/$no$)$ whether the control is worth the cost listed.

$\backslash$table$[[$Threat Category,$\backslash$table$[[$Annual Cost of$],[$Control$/$Safegu$],[$ard$]],$Type of Control,CBA,$],[$Malware Infection,$$8,000,$Antimalware Software,,$],[$Denial of Service,$$6,000,$Firewall,,$]]$