The information system of the Royal Paper Division of Dander Mifflin is deemed to be 90% reliable. A major threat has been identified with an exposure of $5,000,000. Two control procedures exist to deal with the threat. Implementation of control A would cost $140,000 and reduce the risk to 4%. Implementation of control B would cost $100,000 and reduce the risk to 6%. Implementation of both controls would cost $220,000 and reduce the risk to 2%. Given this data and based solely on an economic analysis of costs and benefits, which control procedure should the Royal Paper Division of Dander Mifflin choose? Explain the rationale for your recommendation. (10 marks).