This discussion asks you to evaluate expense of implementing vs. the probability of a penetration. This is a common occurrence in the real world since it is not always possible to implement every solution when budgets are tight. Risk management often calls for judgment backed up by analysis to determine the degree of security that should be implemented. For this discussion, you may need to drag out MS Excel and build a model to determine your recommendation. Supporting documentation and citations are suggested and should be included whenever possible.
Group C will take the lead in this discussion while the members of Groups A, B and D will respond to at least two students’ postings with comments, questions and further discussion. If questions are posed, they should be responded to by the original poster.
Firewall Decision
You are the CEO of Inverness Investments, a medium- size venture capital firm that specializes in investing in high- tech companies. The company receives more than 30,000 email messages per year. On average, there are two viruses and three successful hackings against the company each year, which result in losses to the company of about $ 250,000. Currently, the company has antivirus software installed but does not have any firewalls.
Your CIO is suggesting implementing 10 firewalls for a total cost of $ 80,000. The estimated life of each firewall is about three years. The chances of hackers breaking into the system with the firewalls installed are about 3 percent. Annual maintenance costs on the firewalls are estimated around $ 15,000. Create an argument for or against supporting your CIO’s recommendation to purchase the firewalls.
Questions
References
Baltzan, P. (2014). Business driven information systems (Fourth ed., p. 243). New York, NY: McGraw-Hill/Irwin.