I. Scenario Part 1: Risk Control and Cost Benefit Analysis (CLO2): You are the new information security consultant company for WePlay, a medium-sized Mobile Games development company. Before hiring you, the company had been plagued with some security incidents. The most serious are listed below. - Incident \#1 - Information Leakage: - Three years ago, hackers managed to leak plans for a new game that the company was developing. As a result, a competitor was able to produce a rival version of the game and get it to market first. - Weplay estimates that income of the game's in-app purchases, which were expected to be at $50,000 annually, were reduced by at least 50s due to the information leakage. - Next year, the company is planning to introduce a new game that will be a major upgrade to the previous version. - The cost for averting a similar information leak for the new game is not yet known. But a proposed solution, which will reduce the risk by at least half, is to conduct some staff training sessions. This will cost about $10,000 per year. - Incident \#2 - Virus Attack: - This year, the company had a virus attack that took half of their customer support help desk offline for three days. - Contracts fulfilled using the system are worth $5,000 every day. - A similar virus attack is expected to happen every year. - A proposed solution is to upgrade the antivirus software. This would cost $10,000 in licensing annually. - Incident \#3 - River Flooding: - Last year's flooding in the nearby river closed access to the business for one week. Floods happen almost every five years. - The estimated daily loss of income from on-site operations is estimated at $10,000. - A proposed solution is to participate in a Community Floods Defenses Scheme. This would cost $100,000 in contribution annually. Management has asked you to help by conducting a cost/benefit analysis of the proposed solutions. Answer the following questions as part of your analysis: - With regards to Incident \#1, the information leakage event, would training the staff be a cost-effective measure to mitigate future incidents? - With regards to Incident \#2, the virus attack, would purchasing the antivirus license be a cost-effective solution? - With regards to Incident \#3, the river flooding, would participation in the community floods defenses scheme be justified? Notes: You need to provide full detail of your analysis of the case study. Providing answers to these questions should help you with your analysis and must be viewed as guidance for your full