Calculate the Risk

Página 1

What is the expected loss if there us a 1% chance of a black hat bringing down the order entry system requiring a server restore?

The mean time to restore is 6hrs.

Orders come in an average of 12hrs a day bringing in 500000 a day in revenue across a 364- days a year.

The attacks are expected daily

The Asset Value = 500000

Exposure Factor= 6hr12hr = .5

LE- 500000 x .5 = 250000

ARO = .01 x 364 = 3.64

ALE = SLE x ARO = 250000 x 3.64 = 910000