Description
Using the following table, calculate the SLE, ARO, and ALE for each threat category listed.
XYZ Software Company (Asset value: $1,200,000 in projected revenues)
Threat Category | Cost per Incident | Frequency of Occurrence |
Programmer mistakes | $5,000 | 1 per week |
Loss of intellectual property | $75,000 | 1 per year |
Software piracy | $500 | 1 per week |
Theft of information (hacker) | $2,500 | 1 per quarter |
Theft of information (employee) | $5,000 | 1 per 6 months |
Web defacement | $500 | 1 per month |
Theft of equipment | $5,000 | 1 per year |
Viruses, Worms, Trojan horses | $1,500 | 1 per week |
Denial-of-service attack | $2,500 | 1 per quarter |
Earthquake | $250,000 | 1 per 20 years |
Flood | $250,000 | 1 per 10 years |
Fire | $500,000 | 1 per 10 years |
Unformatted Attachment Preview
Purchase answer to see full attachment
Explanation & Answer
Attached.
1
Running head: SLE, ARO, AND ALE
SLE, ARO, AND ALE
Institutional Affiliation
Date
SLE, ARO, AND ALE
Using the following table, calculate the SLE, ARO, and ALE for each threat category
listed. XYZ Software Company (Asset value: $1,200,000 in projected revenues).
Definition of terms, formulae.
AV-asset value.
EF-exposure factor.
SLE-this is simple the single loss expectancy.
This is calculated by multiplying the EV and AV
AV multiplied by EV gives the SLE.
EV=
cost per incident
asset value
ARO-annual rate of occurrence. This is simple a guess of a certain threat to occur within a
period of one year.
ALE-this stands for annualized loss expectancy. It is calculated by multiplying the SLE and
ARO.
The assumption made in the following calculations is that a single year is made up of 52
weeks. SLE, ARO and ALE for each threat category.
1. Programmer mistakes
The cost for each incident ...