You are currently deciding whether to invest in data loss prevention software. You have some reliable statistics that the software will reduce your information theft incidents by half of the current values. The cost of the software is $100K per year. Recalculate the new ARO and ALE for hacker and employee information theft. Based on these new values, explain your decision whether or not to invest in the Data Loss Prevention Software.

Projected PCS

incidents with Data Theft Prevention

Software Cost per Incident Frequency of Occurrence SLE ARO ALE

Theft of information (hacker) $25,500 1 every 5 years 25,500

Theft of information (employee) $50,000 1 every 2 years 50,000