Use the following facts to assess the time-based model of security for the ABC Com-pany; how well does the existing system protect ABC? Assume that the best-, aver-age-, and worst-case estimates are independent for each component of the model.

Estimated time that existing controls will protect the system from attack 5 15 minutes (worst case), 20 minutes (average case), and 25 minutes (best case)

Estimated time to detect that an attack is happening 5 5 minutes (best case), 8 minutes (average case) and 10 minutes (worst case)

Estimated time to respond to an attack once it has been detected 5 6 minutes (best case), 14 minutes (average case), and 20 minutes (worst case)