See the attached file.
7. A risk assessment was conducted on two assets (A1 and A2) from three threats (T1, T2, T3) with the results as shown in the table below. By making some investments in countermeasures, the assessment team believes that they can reduce the consequences of the threat in each case by 15%. Assume the new countermeasures will have no impact on the threat likelihood of each threat.
See attached for data
a) If you completed a simple B/C analysis of this assessment, which countermeasure would you invest in first?
b) If you completed an incremental B/C analysis of this assessment, which countermeasure would you invest in first?
8. You need to purchase a combination of three items, item x ($50 ea), item y ($15 ea), and item z ($100 ea). THe purchased collection of items must meet the following constraint.
5x + 5y + 5x >=2,500
5x + 10y +15z >=3,500
3x - y + 3z <= 0
x, y and z > = 0
a) How many of each should you purchase to minimize the total cost?
b) What is the total cost?
c) What is the sensitivity of this outcome to cost?
Please see the attached file as your tutorial.
Please note that I've set up ...
The solution discusses risk assessment conducted on assets from threats.