Scenario: A little back ground history on our organization YieldMore. YieldMore is a rapidly growing agricultural company in the north central part of the United States. The company's main product is fertilizer. The company's main headquarters is located in a small town in Indiana. It owns two large production facilities; one located in Oklahoma and the other one located in Nebraska. YieldMore employs sales personnel in every state in the U.S. to serve its customers locally.

The company is equipped with three network servers located at their higher headquarters

1. Active Directory Server

2. Linux application server

3. Oracle database server

The utilization application server hosts YieldMores main software package application, which is a proprietary program managing customer information, supply chain, sales, and company inventory. The database server manages all their personnels data. The data is stored locally with direct attached storage.

All three major sites use Ethernet cabled local area networks (LANs) to connect the users Windows 7 workstations via industry standard managed switches.

All of their production facilities are connected to the higher headquarters via routers, T-1 LAN.

LAN connections provided by an external Internet service providers (ISP) and share an Internet connection through a firewall at headquarters.

YieldMore sales representative personnel across the United States are connected to the companys massive network by virtual private network (VPN). The software utilized are supported and used by their individual organizations Internet connections, most times from within their own home office computers.

Please answer the following questions below:

You, as an employee of YieldMore, have been given a task of providing quantitative risk assessment information to senior management.

1. Estimate the value of at least five key IT assets in the organization.

2. Be sure you consider direct and indirect financial and business impact of the IT assets.

3. Calculate the single loss expectancy (SLE) of the IT assets. (For this exercise, you will need to estimate this value.)

4. Calculate the annual rate of occurrence (ARO) for risk associated with the IT assets. (For this exercise, you will need to estimate this value.)

5. Calculate the annual loss expectancy (ALE) of the IT assets.

6. Create a professional document to present your findings to senior management.