Soru

A manufacturing enterprise is conducting a quantitative risk analysis on a critical industrial control system (ICS) server. The server has an estimated Asset Value ($AV$) of $\$120,000$. A specific malware outbreak is projected to result in an Exposure Factor ($EF$) of $40\%$. Historical threat intelligence indicates that the Annualized Rate of Occurrence ($ARO$) for this type of attack is $0.5$. What is the baseline Annualized Loss Expectancy ($ALE$) in dollars for this asset prior to implementing additional countermeasures?