Essay
The CFO of Exeter Corporation is very uncomfortable with its current risk exposure related to the possibility of business disruptions. Specifically, Exeter is heavily involved with e-business and its internal information systems are tightly interlinked with its key customers' systems. The CFO has estimated that every hour of system downtime will cost the company about $5,000 in sales. The CFO and CIO have further estimated that if the system were to fail, the average downtime would be about 2 hours per incident. They have anticipated (assume with 100% annual probability) that Exeter will likely experience 10 downtime incidents in a given year due to internal computer system problems, and another 10 incidents per year due to external problems; specifically system failures with the Internet service provider (ISP). Currently, Exeter pays an annualized cost of $25,000 for redundant computer and communication systems, and another $25,000 for Internet service provider (ISP) support just to keep total expected number of incidents to 20 per year.
Required:
a.Given the information provided thus far, how much ($) is the company's current expected gross risk?
b.A further preventative control would be to purchase and maintain more redundant computers and communication lines where possible, at an annualized cost of $30,000, which would reduce the expected number of downtimes per year to 5 per year due to internal computer system problems. What would the dollar amount of Exeter's current residual expected risk at this point?
Correct Answer:

Verified
a.$5,000 * 2 hours = $10,000 per inciden...View Answer
Unlock this answer now
Get Access to more Verified Answers free of charge
Correct Answer:
Verified
View Answer
Unlock this answer now
Get Access to more Verified Answers free of charge
Q112: The section of Sarbanes Oxley that has
Q113: Salami slicing is program code that can
Q114: Management is responsible for establishing and maintaining
Q115: The information process control goal which relates
Q116: Which component of the ERM framework is
Q118: Who is legally responsible for establishing and
Q119: The control goal of ensure _ provides
Q120: The section of Sarbanes Oxley that requires
Q121: Which of the following is a control
Q122: The section of Sarbanes Oxley that establishes