8.6a. Use the following facts to assess the time-based model of security for the ABC Com-pany; how well does the existing system protect ABC? Assume that the best-, aver-age-, and worst-case estimates are independent for each component of the model.Estimated time that existing controls will protect the system from attack = 15minutes (worst case), 20 minutes (average case), and 25 minutes (best case)Estimated time to detect that an attack is happeningminutes (average case) and 10 minutes (worst case)Estimated time to respond to an attack once it has been detected = 6 minutes(best case), 14 minutes (average case), and 20 minutes (worst case)= 5 minutes (best case), 8b. The company is considering investing up to an additional $100,000 to improve its secu-rity. Given the following possibilities, which single investment would you recommend?Which combination of investments would you recommend? Explain your answer.An investment of $75,000 would change the estimates for protection time to19 minutes (worst case), 23 minutes (average case), and 30 minutes (best case).An investment of $75,000 would change the estimates for detection time to2 minutes (best case), 4 minutes (average case), and 7 minutes (worst case).An investment of $75,000 would change the estimates for response time to3 minutes (best case), 6 minutes (average case), and 10 minutes (worst case).• An investment of $25,000 would change the estimates for protection time to17 minutes (worst case), 22 minutes (average case), and 28 minutes (best case).An investment of $25,000 would change the estimates of detection time to 4 min-utes (best case), 7 minutes (average case) and 9 minutes (worst case).An investment of $25,000 would change the estimates for response time to4 minutes (best case), 9 minutes (average case), and 12 minutes (worst case).

The time-based model of security refers to the system is security which emphasis on implementing a…

8.6 a. Use the following facts to assess the time-based model of security for the ABC Com- pany; how well does the existing system protect ABC? Assume that the best-, aver- age-, and worst-case estimates are independent for each component of the model. Estimated time that existing controls will protect the system from attack = 15 minutes (worst case), 20 minutes (average case), and 25 minutes (best case) Estimated time to detect that an attack is happening minutes (average case) and 10 minutes (worst case) Estimated time to respond to an attack once it has been detected (best case), 14 minutes (average case), and 20 minutes (worst case) = 5 minutes (best case), 8 = 6 minutes

8.6 a. Use the following facts to assess the time-based model of security for the ABC Com- pany; how well does the existing system protect ABC? Assume that the best-, aver- age-, and worst-case estimates are independent for each component of the model. Estimated time that existing controls will protect the system from attack = 15 minutes (worst case), 20 minutes (average case), and 25 minutes (best case) Estimated time to detect that an attack is happening minutes (average case) and 10 minutes (worst case) Estimated time to respond to an attack once it has been detected (best case), 14 minutes (average case), and 20 minutes (worst case) = 5 minutes (best case), 8 = 6 minutes

Auditing: A Risk Based-Approach to Conducting a Quality Audit

10th Edition

ISBN:9781305080577

Author:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg

Publisher:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg

Chapter7: Planning The Audit: Identifying, And Responding To The Risk Of Material Misstatement

Section: Chapter Questions

Problem 26MCQ

See similar textbooks

Similar questions

17. The following questions/inquiries can be used in determining risk, EXCEPT: Group of answer choices How could that unit fail? What could go wrong? What is the passcode lock of that computer? Where are the people, processes, systems, or assets vulnerable?
According to the risk management process in ISO 31000, which of the following is a necessary step in risk assessment? Select one: A. Risk treatment B. Risk transfer C. Risk analysis D. Risk minimisation #### i want answer within one hour,Thanks
Explanation of single-factor model for estimating the expected required return on a security provide an example please explain in simple english using bullet points
One word to indicate that a security is salable on short notice.
Choose only one answer as well as state their reasons/rationale for the answer chosen. 7) Which input control is designed to prevent a buffer overflow attack?a. Size checkb. Reasonableness testc. Range checkd. Field check
The following is a list of six control plans from this chapter, and these are followed by a list of five definitions or descriptions of control plans. Match the five definitions or descriptions with a control plan that best matches the definition. Because there are six control plans, you should have one letter left over. Control Plans A. Limit checks B. Tickler files C. Public key cryptography D. Compare input data with master data E. One-for-one checking F. Manual reconciliation of batch totals (hash totals) Definitions or Descriptions 1. Determines if a customer number has been input correctly. 2. Ensures that transmitted messages can be read only by authorized receivers. 3. A control plan that confirms a value that was entered is within a valid range. 4. An area (electronic or manual) where documents or other items are stored that need follow-up. 5. Used to detect changes in batches of events to ensure the validity, completeness, and accuracy of the batch.
4. Which of the following is not a risk specific to CIS environment? a. reliance on the functioning capabilities of hardware and software b. increased human involvement c. loss of data due to insufficient backup d. unauthorized access Required: choose the correct answer and Justify your answers in at least 6 sentences.
The software developers of a billing system of ACME Telecom Company would accept at most an error rate of 4% that a sample of invoices would contain some variations that may be present in a large population of total invoices. With a certainty factor of 1.95 how many invoices would they need to examine?