Cost benefit analysis

Question 10: Perform Cost-Benefit Analysis for the following scenario. The email server in your company has an estimated value of $5,000,000. A sabotage or vandalism scenario indicated that 17 percent of the Web site would be damaged or destroyed in such an attack. An attack of this type could happen twice a year. The company had invested in a risk control solution and managed to bring the attack frequency to once every two years. The annual cost of the control is $500,000. Suppose the company identifies another control option at the same cost, which did not reduce the attack frequency but reduced the SLE value to 50%. Which control option do you choose