Sara, the Chief Security Officer (CSO), has had four security breaches during the past two years.
Each breach has cost the company $3,000. A third party vendor has offered to repair the security
hole in the system for $25,000. The breached system is scheduled to be replaced in five years.
Which of the following should Sara do to address the risk?
A.
Accept the risk saving $10,000.
B.
Ignore the risk saving $5,000.
C.
Mitigate the risk saving $10,000.
D.
Transfer the risk saving $5,000.
2 years with 4 breaches each at 3,000
4 breaches x 3000 = 12,000 / 2 years = 6000 per year
6,000 x 5 years = 30,000
30,000 – 25,000 = 5,000
so how is D correct???