Reference no: EM132173425

Chapter 10 Homework

Develop a spreadsheet model of the cost of a virus attack at an organization that has three types of computers: employee workstations, data servers, and Web servers.

Assume that the number of computers affected by the virus depends on the severity of the virus. For the purposes of your model, assume that there are three levels of virus severity: Low-severity incidents affect fewer than 30% of the user workstations, and none of the data or web servers.

Medium-severity incidents affect up to 70% of the user workstations, up to 50% of the web servers, and none of the data servers. High-severity incidents can affect all organizational computers.

a. Assume 40% of the incidents are low severity,35% are medium severity, and 25%are high severity.

b. Assume employees can remove viruses from workstations themselves, but the specially trained technicians are required to repair the servers.

The time to eliminate a virus from an infected computer depends on the computer type. Let the time to remove the virus from each type be an input into your model. Assume that when use eliminate the virus themselves, they are unproductive for twice the time required for the removal.

Let the average employee hourly labor cost be an input to your model. Let the average cost of a technician also be an input into your model. Finally, let the total number of user computers, data servers, and web servers be inputs into your model.

c. Given the example inputs:

Run your simulation 10 times. Use the same inputs for each run, but draw a random number to determine the percentage of computers of each type affected, using the constrains detailed earlier. For example, if the attack is of medium severity, draw a random number between 0 and 70% to indicate the percentage of infected user workstations and a random number between 0 and 50% to indicate the percentageof infected web servers.

d. For each run, calculate the total of lost employee hours, the total dollar cost of lost employee labor hours, the total hours of technician labor needed to fix the servers, and the total cost of technician labor. Finally compute the total overall cost. Show the results of each run. Show the average costs and hours for the 10 runs.