Hello I need help answering these 3 questions on Information Security

1. Probabilities of an event x over five occurrences are given in the table below. X 1 2 3 4 5 P(X=x) 1/6 1/6 1/3 1/4 1/12 What is the expected value of the information over all the occurrences?

2. Information asset X is an internal human resources database behind a firewall which has a value of 40 on a scale of 0 to 100. A successful attack decimates 50% of Xs worth. Industry reports indicate a 2 percent chance of such an attack. The information security department has assessed that if the organization is attacked, the attack has a 15% percent chance of success based on the current asset vulnerabilities and safeguards. Assuming 10% margin of error in data, calculate the risk to asset X.

3. An important part of threat modelling is preparation of a data flow diagram (DFD) and drawing trust boundaries. A trust boundary, on a DFD, separates two domains that do not trust each other. If an application reads a file from the disk, there is a trust boundary between the application and the file because outside processes and users can modify the data in the file.

Assume that you have just been hired as an Information Security Analyst for a Precision Agriculture business. Customers place orders on the company website hosted on the Amazon EWS cloud system. On receipt of an order, the system checks whether the order is for one of the specialty patented products or a mass product and sends it to the appropriate department. The concerned department checks the inventory, generates a shipping order for the warehouse which fills the order. The customer is informed if the product is in stock. If after filling the order, the inventory level goes below the reordering point, the system generates and sends an order to the supplier of that product. In the case of the patented specialty product, the concerned department sends a manufacturing order to the plant and an advance shipping order to the warehouse. Warehouse ships the item when received. The specialty department apprises the customer accordingly. When the order has shipped, the accounts department sends a bill to the customer.

a. List all processes, data flows and data stores. b. Draw a DFD and mark trust boundaries.

Please read carefully and give a proper answer for all 3 questions. Thank you.