The CFO of Blesning Corporation is very uncomfortable with its current risk exposure related to the possibility of business disruptions. Specifically, Blesning is heavily involved in e-Business and its internal information systems are tightly interlinked with its key customers systems. The CFO has estimated that every hour of system downtime will cost the company about $10,000 in sales. The CFO and CIO (chief information officer) have further estimated that if the system were to fail, the average downtime would be 1 hour per incident. They have anticipated that Blesning will likely experience 50 downtime incidents in a given year due to internal computer system problems and another 50 incidents per year due to external problems; specifically, system failures with the Internet service provider (ISP). Currently, Blesning pays an annualized cost of $150,000 for redundant computer and communication systems, and $100,000 for Internet service provider (ISP) support just to keep the total expected number of incidents to 100 per year.

Required:

a) Give the information provided thus far, how much ($) is the company's current expected risk

$10000 * 1 hour = $ 10000 per incident

$10,000 per incident * 100 incidents * 100% probability = 1000,000 for expected risk

b. A further preventative control would be to purchase and maintain more redundant computers and communication lines where possible, at an annualized cost of $100,000, which would reduce the expected number of downtime incidents to 15 per year due to internal computer system problems. What would be the dollar amount of Blesnings expected risk with the additional computers?

Expected gross risk 1000,000 -

c. An external threat still prevails, that is, the ISP could cause the business interruption. Hence, another preventative control would be to increase the annual service fee the company pays to its ISP to a higher level of guaranteed service, based on the following schedule:

Guaranteed Maximum Number of Downtime Incidents per Year:	Annual Cost of Service Support
50	$100,000 (current contract)
40	$150,000
30	$200,000
20	$300,000
10	$425,000
0	$550,000

Would you purchase a higher level of service from the ISP? If so, what level of service would you purchase? Please defend your answer both quantitatively and qualitatively.