- •Table of contents
- •Executive Summary
- •Recommendations
- •Operational Environment and System Configuration
- •The Risk Assessment Team
- •Organization Details of SpecOrg
- •Physical Plant and Physical Security
- •System Configuration
- •Terms and Definitions
- •Risk Analysis Methodology
- •RiskWatch Parameters and Data Analysis
- •Executive Summary Scope
- •Risk Analysis Steps
- •Key Risk Analysis Report Findings
- •Summary of asset categories
- •Assets within category
- •Direct, Personnel
- •Dollars
- •Safeguard: Physical Access Control
- •Safeguard: Classification Markings
- •Safeguard: Data Encryption
- •Safeguard: Life Cycle Management
- •Safeguard: Personnel Clearances
- •Safeguard: Quality Assurance
- •Safeguard: Security Policy
- •Recommendations
- •Physical Access Control
- •Application Controls
- •Classification Markings
- •Contract Specifications
- •Data Encryption
- •Detection System
- •Life Cycle Management
- •Passwords/Authenticaion
- •Personnel Clearances
- •Personnel Control
- •Quality Assurance
- •Risk Analysis
- •Security Policy
- •Return On Invest ment(roi). Calculated in order of the 10 highest roIs.
- •5.1 Summary of safeguards
- •Initial costs
- •Access Control (26.0%)
- •Evaluation (6.0%)
- •Policy (26.0%) Reliability (16.0%)
Quality Assurance
Lifetime: 5 Implementation Cost: $400,000. Annual Maintenance Cost: $300,000.
-
Year
Benefits
Costs
Disc. Ben(0.1)
Disc. Cost(0.1)
DB-DC(0.1)
1
$5,959.
$400,000.
$5,416.
$363,636.
$-358,219.
2
$5,959.
$300,000.
$4,924.
$247,933.
$-243,009.
3
$5,959.
$300,000.
$4,476.
$225,394.
$-220,917.
4
$5,959.
$300,000.
$4,069.
$204,904.
$-200,834.
5
$5,959.
$300,000.
$3,699.
$186,276.
$-182,576.
Sum of discounted benefits (0.05): $25,795. Sum of discounted benefits (0.1): $22,584. Sum of discounted benefits (0.15): $19,971. Sum of discounted costs (0.05): $1,394,078. Sum of discounted costs (0.1): $1,228,143. Sum of discounted costs (0.15): $1,092,601. Benefit Cost Ratio (0.05): 0.02
Benefit Cost Ratio (0.1): 0.02
Benefit Cost Ratio (0.15): 0.02
Return On Investment (0.05): 0.00
Return On Investment (0.1): 0.00
Return On Investment (0.15): 0.00
Payback period (0.05): 0
Payback period (0.1): 0
Payback period (0.15): 0
Risk Analysis
Lifetime: 3 Implementation Cost: $100,000. Annual Maintenance Cost: $30,000.
-
Year
Benefits
Costs
Disc. Ben(0.1)
Disc. Cost(0.1)
DB-DC(0.1)
1
$10,693.
$100,000.
$9,720.
$90,909.
$-81,188.
2
$10,693.
$30,000.
$8,836.
$24,793.
$-15,956.
3
$10,693.
$30,000.
$8,033.
$22,539.
$-14,505.
Sum of discounted benefits (0.05): $29,117. Sum of discounted benefits (0.1): $26,589. Sum of discounted benefits (0.15): $24,412. Sum of discounted costs (0.05): $148,363. Sum of discounted costs (0.1): $138,241.
Sum of discounted costs (0.15): $129,365. Benefit Cost Ratio (0.05): 0.20
Benefit Cost Ratio (0.1): 0.19
Benefit Cost Ratio (0.15): 0.19
Return On Investment (0.05): 0.07
Return On Investment (0.1): 0.06
Return On Investment (0.15): 0.06
Payback period (0.05): 0
Payback period (0.1): 0
Payback period (0.15): 0
Security Policy
Lifetime: 3 Implementation Cost: $70,000. Annual Maintenance Cost: $40,000.
-
Year
Benefits
Costs
Disc. Ben(0.1)
Disc. Cost(0.1)
DB-DC(0.1)
1
$267,409.
$70,000.
$243,099.
$63,636.
$179,462.
2
$267,409.
$40,000.
$220,999.
$33,057.
$187,941.
3
$267,409.
$40,000.
$200,908.
$30,052.
$170,855.
Sum of discounted benefits (0.05): $728,219. Sum of discounted benefits (0.1): $665,006. Sum of discounted benefits (0.15): $610,553. Sum of discounted costs (0.05): $137,500.
Sum of discounted costs (0.1): $126,745. Sum of discounted costs (0.15): $117,414. Benefit Cost Ratio (0.05): 5.30
Benefit Cost Ratio (0.1): 5.25
Benefit Cost Ratio (0.15): 5.20
Return On Investment (0.05): 1.77
Return On Investment (0.1): 1.75
Return On Investment (0.15): 1.73
Payback period (0.05): 1
Payback period (0.1): 1
Payback period (0.15): 1
Here is a summary of the Return on Investment (R.O.I) for each safeguard.
-
Safeguard
ROI(10%)
Percentage of Total
Application Controls
3.37
52.6%
Security Policy
1.75
27.3%
Data Encryption
1.02
15.9%
Personnel Clearances
0.17
2.7%
Risk Analysis
0.06
1.0%
Physical Access Control
0.01
0.2%
Detection System
0.01
0.2%
Quality Assurance
0.00
0.1%
Classification Markings
0.00
0.1%
Life Cycle Management
0.00
0.0%
Personnel Control
0.00
0.0%
Passwords/Authenticaion
0.00
0.0%
-
Contract Specifications
0.00
0.0%
ROI
Application
Cont
rols
Security
Policy
Data
Encryption
1 2 3
