A security incident happens three times a year on a company’s web server costing the company
$1,500 in downtime, per occurrence. The web server is only for archival access and is scheduled
to be decommissioned in five years. The cost of implementing software to prevent this incident
would be $15,000 initially, plus $1,000 a year for maintenance. Which of the following is the MOST
cost-effective manner to deal with this risk?

An administrator is assessing the potential risk impact on an accounting system and categorizes it
as follows:
Administrative Files = {(Confidentiality, Moderate), (Integrity, Moderate), (Availability, Low)}
Vendor Information = {(Confidentiality, Moderate), (Integrity, Low), (Availability, Low)}
Payroll Data = {(Confidentiality, High), (Integrity, Moderate), (Availability, Low)}
Which of the following is the aggregate risk impact on the accounting system?