Steps

1. For this project, assume that an organization has five servers. Server 1 has a TCO of $25,000, servers 2 and 3 have a TCO of $37,000 each, and the remaining two servers servers 4 and 5 have a TCO of $42,000 each. The servers are not used by internal employees but are used by Web visitors. The total income that all five servers brings in is $5 million a year (equally provided by all five servers). Compute the total asset value for each of the five servers.

[TEXT RESPONSE]

2. In order to recover from an attack on any one server, it would take an estimated 14 hours to rebuild servers 1, 2, 3, and 4 and 37 hours to rebuild server 5. If each server is required to be online 8,760 hours a year, compute the EF for each server.

[TEXT RESPONSE]

3. Since the security for the five web servers is moderate, a web attack is estimated to occur once per year. Compute the ARO for a web attack.

[TEXT RESPONSE]

4. What is the ALE for a web attack for each of the five servers?

[TEXT RESPONSE]

5. What is the total ALE for the entire organization for a web attack that damages all five servers at the same time?

[TEXT RESPONSE]

6. Based on the calculated ALE for an attack that damages all five servers, how much should the organization spend on security controls to prevent web attacks on the five servers?

[TEXT RESPONSE]