Question

1. A company experiences an average of 25 malware outbreaks per year. Each event costs the company $10,000 to clean up.

   1. What is the annualized loss expectancy (ALE)?

2. In designing a solution to the problem, at what point will the firm hit the law of diminishing returns?

2. Name two programs, one for auditing Windows passwords and one for UNIX passwords.  

   1. An example of a Windows password cracking tool is =

   2. An example of a Unix password cracking tool is =

Answer 1

Annualized Loss Expectancy (ALE) is reffered to as a product of annual rate of occurrence (ARO) and the single loss expectancy (SLE). It is otherwise be defined as the amount of loss expected from a risk within a time period of an year.The value of ALE helps to determine the probbabilty of risk of loss within a particular year.

In designing a solution to the problem, the point at which the firm will hit the law of diminishing return is the point where we keep all factors constant and increasing one unit of the input variable and we find that the margin per unit starts decreasing.

An example of a Windows password cracking tool is Cain and Abel.

An example of a Unix password cracking tool is John the Ripper