Software firm on developing appropriate disclosure policies

Assignment Help Business Economics

Reference no: EM13774026

You are advising a software firm on developing appropriate disclosure policies. You spend some time analyzing the past data that the firm has made available to you and come up with the following numbers for a typical software product.

There are on average about a million customers using the product and they would lose on average $100 each if attacker can exploit it. The vendor cares only about 50% of its customer loss. When vulnerability is reported to you, if you ask the vendor to provide a patch within a week (LOW), the vendor can provide the patch at the cost of $500,000. In this case, only 0.1% of the users will suffer loss. If you ask the vendor to provide a patch within two weeks (MEDIUM) then they can provide the patch for $250,000 but by that time many exploit tools would become available increasing the probability that the 0.4% of the users will suffer breaches and loss. Finally, if you ask the vendor to provide a patch in a month, (HIGH) then it costs them only $100,000 but 1% of the users will suffer loss.

Assume that customers patch their systems as soon as the patch becomes available.

When will vendor issue the patch if the vendor is free to decide?

As the firm, when would you like vendor to issue the patch?

Reference no: EM13774026

Questions Cloud

Computer-controlled milling machine will cost : A computer-controlled milling machine will cost Ajax Manufacturing $65,000 to purchase plus $4700 to install. If the machine would have a salvage value of $6600 at EOY 20, how much could Ajax charge annually to depreciation of this equipment? Ajax us..

Statement on the legal aspects of the incident : A brief introduction of the scene and the accident. Safety and health impacts of the accident

How much gain or recaptured depreciation is there : A computer costs $9500 and its salvage value in 5 years is negligible. What is the book value after 3 years? If the machine is sold for $1500 in Year 5, how much gain or recaptured depreciation is there? Assume:

Discuss ethics in a health care organization : Write a 1,400- to 1,750-word paper in which you discuss ethics in a health care organization. Include the following:

Software firm on developing appropriate disclosure policies : You are advising a software firm on developing appropriate disclosure policies. You spend some time analyzing the past data that the firm has made available to you and come up with the following numbers for a typical software product.

What are the jets and the nozzles and how are they works and : What are the jets and the nozzles and how are they works and what their applications?

Assignment on administrative ethics paper : Find a current administrative issue in a newspaper, magazine, or journal article relating to topics such as patient privacy, confidentiality, or HIPAA.

Branding of a health care-related product or service : What is the profitability of the product and what is the effect on the bottom line?

What is the velocity when it is 5 m from the ground : "A 40 kg rock is dropped from a height of 30 m. What is the velocity when it is 5 m from the ground?"

User Account

All Pages