{"text_format":"2","workbook":"xlsx","n_sheets":8,"sheets":["General assumptions","Spam","Virus","DDoS","Data theft","Botnet","Comparison","ROSI calculation"],"not_rendered":{"charts":1,"images":0,"macros":0,"external_links":0,"defined_names":38,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"General assumptions","index":0,"n_rows":22,"n_cols":10,"rows_kept":22,"cut":false,"hidden":false,"merged":[[2,1,3,1],[2,2,2,5],[2,6,2,9],[3,4,3,5],[3,2,3,3],[3,6,3,7],[3,8,3,9]]}
[null,"if you enter percent values, enter without % sign, i.e. if you need to enter 50%, just enter 50."]
[]
[null,"Part of the entity affected","Internet store",null,null,null,"College"]
[null,null,"number of employees",null,"yearly salary",null,"number of employees",null,"yearly salary"]
[null,"Operational employees",75,"persons",30000,"€/year",75,"persons",30000,"€/year"]
[null,"Managers",15,"persons",50000,"€/year",15,"persons",50000,"€/year"]
[null,"Top managers",3,"persons",100000,"€/year",3,"persons",100000,"€/year"]
[null,"IT & security officers",6,"persons",50000,"€/year",6,"persons",50000,"€/year"]
[null,"Lawyers",1,"persons",80000,"€/year",1,"persons",80000,"€/year"]
[null,"Total employees",{"$f":"SUM(C5:C9)","v":100},"persons",{"$f":"SUMPRODUCT(C5:C9,E5:E9)","v":3680000},"€/year",{"$f":"SUM(G5:G9)","v":100},"persons",{"$f":"SUMPRODUCT(G5:G9,I5:I9)","v":3680000},"€/year"]
[null,"Mean average salary",null,null,{"$f":"E10/C10","v":36800},"€/year",null,null,{"$f":"I10/G10","v":36800},"€/year"]
[null,"College",null,null,null,"Numer of the affected students in the college",2000,"Yearly tuition",6000,"€/year"]
[{"$nulls":5},"Total for all affected participants",{"$f":"G10+G12","v":2100},"Total yearly cost",{"$f":"I10+G12*I12","v":15680000},"€/year"]
[null,"Internet store"]
[null,"Revenue",200000000,"€"]
[null,"Average margin",5,"%"]
[null,"Number of work-days per year (for both store and college)",{"$f":"52*5-11-26-10","v":213},"days","52 weeks @ 5 days -11 public holidays - 26 days of vacation - 10 illness days"]
[null,"Other personnel costs (above total personnel salaries)*",32,"%",null,null,32,"%"]
[null,"Other costs (above total personnel costs)**",60,"%",null,null,90,"%"]
[]
["*","Other personnel costs include among others: social security, insurance premium (if paid by employer), superannuation (if paid by employer), leaves, trade-union dues (in part paid by an employer)"]
["**","Other costs comprise all costs borne by the entity besides total personnel costs and Cost of Goods Sold (COGS), i.e. subcontractors' costs, rents, supplies,  amortisation&depreciation, financial costs, etc"]

{"sheet":"Spam","index":1,"n_rows":22,"n_cols":10,"rows_kept":22,"cut":false,"hidden":false,"merged":[[8,4,8,5],[8,6,8,7],[21,2,21,3],[1,6,1,7]]}
[]
[null,"Spam assumptions",{"$nulls":4},"Common data"]
[null,null,"number of spam mails per day per employee and student",null,null,null,500,"spam mails"]
[null,null,"percent of spam mails that get through the filtering systems",null,null,null,1,"%",{"$f":"G3*G4/100","v":5},"spams deleted manualy daily"]
[null,null,"time to identify e-mail as a spam, delete it and return to the productive work",null,null,null,2,"seconds"]
[]
[null,null,"number of work-days lost yearly by each of the employee or student",null,null,null,{"$f":"G5*G4*G3/100*Days_in_year/480/60","v":7.3958333333333334E-2},"days"]
[]
[null,"Calculation",null,"Loss components","Internet store",null,"College"]
[null,null,"Labor loss",null,{"$f":"Days_lost/Days_in_year*I_total_E*I_aver_sala*(1+I_other_pers_cost/100)","v":1686.6666666666667},"€",{"$f":"Days_lost/Days_in_year*C_total_year_cost*(1+C_other_pers_cost/100)","v":7186.666666666667},"€"]
[null,null,"Other company/college costs",null,{"$f":"E10*I_other_cost/100","v":1012},"€",{"$f":"G10*C_other_cost/100","v":6468},"€"]
[null,null,"Lost income",null,{"$f":"I_year_turnover*I_aver_margin/100*Days_lost/Days_in_year","v":3472.2222222222226},"€",0,"€"]
[null,null,"Recovery value of destroyed equipment and lost licenses",null,0,"€",0,"€"]
[null,null,"Yearly amortisation of additional serves power and bandwidth to process the spam",null,500,"€",500,"€"]
[null,null,"Loss of intangible assets",null,{"$f":"SUM(E16:E18)","v":0},"€",{"$f":"SUM(G16:G18)","v":0},"€"]
[null,null,null,"reputation (among stakeholders, incl. customers and employees)",0,"€",0,"€"]
[null,null,null,"know-how and trade secrets",0,"€",0,"€"]
[null,null,null,"new R&D required",0,"€",0,"€"]
[null,null,"Legal responsibility",null,{"$f":"SUM(E20:E21)","v":0},"€",{"$f":"SUM(G20:G21)","v":0},"€"]
[null,null,null,"contractual penalties",0,"€",0,"€"]
[null,null,null,"external lawyers' fees",0,"€",0,"€"]
[null,null,"TOTAL YEARLY COST",null,{"$f":"E10+E11+E12+E13+E14+E15+E19","v":6670.8888888888896},"€",{"$f":"G10+G11+G12+G13+G14+G15+G19","v":14154.666666666668},"€"]

{"sheet":"Virus","index":2,"n_rows":34,"n_cols":9,"rows_kept":34,"cut":false,"hidden":false,"merged":[[1,5,1,8],[18,5,18,6],[18,7,18,8],[33,2,33,4],[18,3,18,4],[8,5,8,6],[8,7,8,8],[8,3,8,4]]}
[]
[null,"Virus assumptions",null,null,null,"Common data"]
[null,null,"Percent of employees' (and students') computers affected",null,null,null,20,"%"]
[null,null,"Number of work-days lost by each of the employees/students affected ",null,null,null,1,"day"]
[null,null,"Time to clean up 1 computer",null,null,null,30,"minutes"]
[null,null,"Percent of IT & sec managers involved in clean-up",null,null,null,60,"%"]
[null,null,"Time to identify the problem and create a solution",null,null,null,2,"hours"]
[null,null,"Additional time required to reinstall the systems",null,null,null,6,"days"]
[null,"Calculation",null,null,null,"Internet store",null,"College"]
[null,null,"i.e. number of employees' computers affected (to clean-up)",null,null,{"$f":"ROUND(G3/100*I_total_E,0)","v":20},"computers",{"$f":"ROUND(G3/100*C_total_E,0)","v":20},"computers"]
[null,null,"i.e. number of students' computers affected",{"$nulls":4},{"$f":"ROUND(G3/100*Students,0)","v":400},"computers"]
[null,null,"i.e. number of IT & security department employees angaged",null,null,{"$f":"ROUND(G6/100*I_IT_secu_offi,0)","v":4},"persons",{"$f":"ROUND(G6/100*C_IT_secu_offi,0)","v":4},"persons"]
[null,null,"Time to clean all computers",null,null,{"$f":"F10*G5/F12/60","v":2.5},"hours",{"$f":"H10*G5/H12/60","v":2.5},"hours"]
[null,null,"Mean amount of lost work and time to wait for the cleaned computer",null,null,{"$f":"G4*8+G7+F13/2","v":11.25},"hours",{"$f":"G4*8+G7+H13/2","v":11.25},"hours"]
[null,null,"Idle time of all affected employees",null,null,{"$f":"F14*F10","v":225},"hours",{"$f":"H14*H10","v":225},"hours"]
[null,null,"Additional work of IT dept & security employees",null,null,{"$f":"F12*(G7+F14)","v":53},"hours",{"$f":"H12*(G7+H14)","v":53},"hours"]
[null,null,"Lost time, idle time and reinstallment work by students",{"$nulls":4},{"$f":"H11*(G4*8+G7+G5/60)","v":4200},"hours"]
[]
[null,"Calculation",null,"Loss components",null,"Internet store",null,"College"]
[null,null,"Labor loss",null,null,{"$f":"SUM(F21:F22)","v":6590.3755868544604},"€",{"$f":"SUM(H21:H22)","v":21379.107981220655},"€"]
[null,null,null,"employees and students",null,{"$f":"F15/8/Days_in_year*I_aver_sala","v":4859.1549295774648},"€",{"$f":"(H15/8/Days_in_year*C_aver_sala+H17/8/Days_in_year*Tuition)","v":19647.887323943662},"€"]
[null,null,null,"IT & security department",null,{"$f":"(G8+F16)/8/Days_in_year*S_I_IT_secu_offi","v":1731.2206572769953},"€",{"$f":"(G8+H16)/8/Days_in_year*S_C_IT_secu_offi","v":1731.2206572769953},"€"]
[null,null,"Other company/college costs",null,null,{"$f":"F20*I_other_cost/100","v":3954.2253521126763},"€",{"$f":"H20*C_other_cost/100","v":19241.197183098589},"€"]
[null,null,"Lost income",null,null,{"$f":"I_year_turnover*I_aver_margin/100*G3/100/Days_in_year*F14/8","v":13204.225352112677},"€",0,"€"]
[null,null,"Recovery value of destroyed equipment and lost licenses",null,null,0,"€",0,"€"]
[null,null,"Yearly amortisation of additional serves power and bandwidth to process the spam",null,null,0,"€",0,"€"]
[null,null,"Loss of intangible assets",null,null,{"$f":"SUM(F28:F30)","v":0},"€",{"$f":"SUM(H28:H30)","v":0},"€"]
[{"$nulls":4},"reputation (among stakeholders, incl. customers and employees)",0,"€",0,"€"]
[{"$nulls":4},"know-how and trade secrets",0,"€",0,"€"]
[{"$nulls":4},"new R&D required",0,"€",0,"€"]
[null,null,"Legal responsibility",null,null,{"$f":"SUM(F32:F33)","v":0},"€",{"$f":"SUM(H32:H33)","v":0},"€"]
[{"$nulls":4},"contractual penalties",0,"€",0,"€"]
[{"$nulls":4},"external lawyers' fees",0,"€",0,"€"]
[null,null,"TOTAL COST PER INCIDENT",null,null,{"$f":"F20+F23+F24+F25+F26+F27+F31","v":23748.826291079815},"€",{"$f":"H20+H23+H24+H25+H26+H27+H31","v":40620.305164319245},"€"]

{"sheet":"DDoS","index":3,"n_rows":23,"n_cols":9,"rows_kept":23,"cut":false,"hidden":false,"merged":[[22,2,22,4],[1,5,1,8],[3,5,3,6],[3,7,3,8],[8,3,8,4],[8,5,8,6],[8,7,8,8]]}
[]
[null,"DDoS assumptions",null,null,null,"Common data"]
[null,null,"Duration of DDoS attack",null,null,null,36,"hours"]
[{"$nulls":5},"Internet store",null,"College"]
[null,null,"Percent of employees working at decreased efficiency",null,null,50,"%",10,"%"]
[null,null,"Level of efficiency of those who have decreased their efficiency",null,null,20,"%",50,"%"]
[null,null,"Percent of all students who are actively participating in the distant learning process",{"$nulls":4},20,"%"]
[]
[null,"Calculation",null,"Loss components",null,"Internet store",null,"College"]
[null,null,"Labor loss",null,null,{"$f":"G3/24*F5/100*I_total_E*(1-DDoS!F6/100)/Days_in_year*I_aver_sala*(1+I_other_pers_cost/100)","v":13683.380281690141},"€",{"$f":"G3/24*H5/100*C_total_E*(1-DDoS!H6/100)/Days_in_year*C_aver_sala*(1+C_other_pers_cost/100)","v":1710.4225352112676},"€"]
[null,null,"Other company/college costs",null,null,{"$f":"F10*I_other_cost/100","v":8210.0281690140855},"€",{"$f":"H10*C_other_cost/100","v":1539.3802816901409},"€"]
[null,null,"Lost internet store income",null,null,{"$f":"G3/24/365*I_year_turnover*I_aver_margin/100","v":41095.890410958898},"€",0,"€"]
[null,null,"Tuition lost by students who were not able to learn in the distant learning process",{"$nulls":4},{"$f":"H7/100*Students*G3/24/Days_in_year*Tuition","v":16901.408450704224},"€"]
[null,null,"Recovery value of destroyed equipment and lost licenses",null,null,0,"€",0,"€"]
[null,null,"Yearly amortisation of additional serves power and bandwidth to process the spam",null,null,0,"€",0,"€"]
[null,null,"Loss of intangible assets",null,null,{"$f":"SUM(F17:F19)","v":0},"€",{"$f":"SUM(H17:H19)","v":0},"€"]
[{"$nulls":4},"reputation (among stakeholders, incl. customers and employees)",0,"€",0,"€"]
[{"$nulls":4},"know-how and trade secrets",0,"€",0,"€"]
[{"$nulls":4},"new R&D required",0,"€",0,"€"]
[null,null,"Legal responsibility",null,null,{"$f":"SUM(F21:F22)","v":0},"€",{"$f":"SUM(H21:H22)","v":0},"€"]
[{"$nulls":4},"contractual penalties",0,"€",0,"€"]
[{"$nulls":4},"external lawyers' fees",0,"€",0,"€"]
[null,null,"TOTAL COST PER INCIDENT",null,null,{"$f":"F10+F11+F12+F14+F15+F16+F20","v":62989.298861663126},"€",{"$f":"H10+H11+H12+H13+H14+H15+H16+H20","v":20151.211267605635},"€"]

{"sheet":"Data theft","index":4,"n_rows":24,"n_cols":9,"rows_kept":24,"cut":false,"hidden":false,"merged":[[23,2,23,4],[8,1,8,5],[1,6,1,8],[10,3,10,4],[10,5,10,6],[10,7,10,8]]}
[]
[null,"Data theft assumptions",{"$nulls":4},"Common data"]
[null,null,"Number of class action participants",null,null,null,1000,"persons"]
[null,null,"Succesfully sued to pay",null,null,null,1000,"each person"]
[null,"The incident required:"]
[null,null,"number of top management hours",null,null,null,30,"hours"]
[null,null,"number of lawyers hours",null,null,null,100,"hours"]
[null,"Entity had to pay external legal fees",{"$nulls":4},10000,"€"]
[null,"Percent of customers/students who during the following year decided not to buy/study due to bad press (relative to the present number of customers/students)",{"$nulls":4},5,"%"]
[]
[null,"Calculation",null,"Loss components",null,"Internet store",null,"College"]
[null,null,"Labor loss",null,null,{"$f":"(G6/8*S_I_top_mana+G7/8*S_I_lawy)/Days_in_year*(1+I_other_pers_cost/100)","v":8521.1267605633802},"€",{"$f":"(G6/8*S_C_top_mana+G7/8*S_C_lawy)/Days_in_year*(1+C_other_pers_cost/100)","v":8521.1267605633802},"€"]
[null,null,"Other company/college costs",null,null,{"$f":"F12*I_other_cost/100","v":5112.6760563380285},"€",{"$f":"H12*C_other_cost/100","v":7669.0140845070418},"€"]
[null,null,"Lost income",null,null,0,"€",0,"€"]
[null,null,"Recovery value of destroyed equipment and lost licenses",null,null,0,"€",0,"€"]
[null,null,"Yearly amortisation of additional serves power and bandwidth to process the spam",null,null,0,"€",0,"€"]
[null,null,"Loss of intangible assets",null,null,{"$f":"SUM(F18:F20)","v":500000},"€",{"$f":"SUM(H18:H20)","v":200000},"€"]
[null,null,null,"reputation (among stakeholders, incl. customers and employees)",null,{"$f":"G9/100*I_year_turnover*I_aver_margin/100","v":500000},"€",{"$f":"G9/100*Students/3*Tuition","v":200000},"€"]
[null,null,null,"know-how and trade secrets",null,0,"€",0,"€"]
[null,null,null,"new R&D required",null,0,"€",0,"€"]
[null,null,"Legal responsibility",null,null,{"$f":"SUM(F22:F23)","v":1000000},"€",{"$f":"SUM(H22:H23)","v":1000000},"€"]
[null,null,null,"contractual or legal penalties",null,{"$f":"G3*G4","v":1000000},"€",{"$f":"G3*G4","v":1000000},"€"]
[null,null,null,"external lawyers' fees",null,0,"€",0,"€"]
[null,null,"TOTAL COST PER INCIDENT",null,null,{"$f":"F12+F13+F14+F15+F16+F17+F21","v":1513633.8028169014},"€",{"$f":"H12+H13+H14+H15+H16+H17+H21","v":1216190.1408450704},"€"]

{"sheet":"Botnet","index":5,"n_rows":63,"n_cols":8,"rows_kept":63,"cut":false,"hidden":false,"merged":[[29,2,29,3],[5,4,5,7],[12,4,12,5],[12,6,12,7]]}
[null,"LEA officers entered the entity premises and seized:"]
[null,3,"employee computers"]
[null,1,"IT admin computers"]
[null,1,"file server, router"]
[]
[null,"Botnet assumptions",null,null,"Common data"]
[null,null,"Percent of total number of employees working at decreased efficiency for half a day",null,null,50,"%"]
[null,null,"Efficiency of those who worked at the decreased efficiency",null,null,20,"%"]
[null,null,"IT staff work additionally (due to lost previous work and need to restore)",null,null,20,"work-days"]
[null,null,"Lawyers worked on the problem for",null,null,1,"work-days"]
[null,null,"Top managers worked on the problem for",null,null,0.5,"work-days"]
[]
[null,"Calculation",null,null,"Internet store",null,"College"]
[null,null,"Labor loss",null,{"$f":"SUM(E15:E18)","v":10721.12676056338},"€",{"$f":"SUM(G15:G18)","v":10721.12676056338},"€"]
[null,null,null,"operational employees lost time",{"$f":"F7/100*I_total_E*(1-F8/100)*0.5/Days_in_year*S_I_oper_empl*(1+I_other_pers_cost/100)","v":3718.3098591549292},"€",{"$f":"F7/100*C_total_E*(1-F8/100)*0.5/Days_in_year*S_C_oper_empl*(1+C_other_pers_cost/100)","v":3718.3098591549292},"€"]
[null,null,null,"IT staff additional work",{"$f":"F9/Days_in_year*S_I_IT_secu_offi*(1+I_other_pers_cost/100)","v":6197.1830985915494},"€",{"$f":"F9/Days_in_year*S_C_IT_secu_offi*(1+C_other_pers_cost/100)","v":6197.1830985915494},"€"]
[null,null,null,"Lawyers additional time",{"$f":"F10/Days_in_year*S_I_lawy*(1+I_other_pers_cost/100)","v":495.77464788732397},"€",{"$f":"F10/Days_in_year*S_C_lawy*(1+C_other_pers_cost/100)","v":495.77464788732397},"€"]
[null,null,null,"Top managers additional time",{"$f":"F11/Days_in_year*S_I_top_mana*(1+I_other_pers_cost/100)","v":309.85915492957747},"€",{"$f":"F11/Days_in_year*S_C_top_mana*(1+C_other_pers_cost/100)","v":309.85915492957747},"€"]
[null,null,"Other company/college costs",null,{"$f":"E14*I_other_cost/100","v":6432.6760563380285},"€",{"$f":"G14*C_other_cost/100","v":9649.0140845070418},"€"]
[null,null,"Lost income",null,0,"€",0,"€"]
[null,null,"Recovery value of destroyed equipment and lost licenses",null,30000,"€",30000,"€"]
[null,null,"Yearly amortisation of additional serves power and bandwidth ",null,0,"€",0,"€"]
[null,null,"Loss of intangible assets",null,{"$f":"SUM(E24:E26)","v":0},"€",{"$f":"SUM(G24:G26)","v":0},"€"]
[null,null,null,"reputation (among stakeholders, incl. customers and employees)",0,"€",0,"€"]
[null,null,null,"know-how and trade secrets",0,"€",0,"€"]
[null,null,null,"new R&D required",0,"€",0,"€"]
[null,null,"Legal responsibility",null,{"$f":"SUM(E28:E29)","v":0},"€",{"$f":"SUM(G28:G29)","v":0},"€"]
[null,null,null,"contractual penalties",0,"€",0,"€"]
[null,null,null,"external lawyers' fees",0,"€",0,"€"]
[null,null,"TOTAL COST PER INCIDENT",null,{"$f":"E14+E19+E20+E21+E22+E23+E27","v":47153.802816901407},"€",{"$f":"G14+G19+G20+G21+G22+G23+G27","v":50370.140845070418},"€"]
[]
[]
[]
[null,"LEA officers entered the entity premises and seized:"]
[null,3,"employee computers"]
[null,1,"IT admin computers"]
[null,1,"file server, router"]
[null,"Number of internet store/college employees",50,20,"% efficiency for half a day"]
[null,"IT admin lost",20]
[null,"Lawyers worked on the problem for",1]
[null,"Top manager worked on the problem for",0.5]
[null,null,"internet store","college"]
[]
[null,"Labor loss",{"$f":"C38*1/2*(1-D38/100)/'General assumptions'!C17*'General assumptions'!#REF!*(1+'General assumptions'!C18/100)","v":{"$error":"#REF!"}},{"$f":"C38*1/2*(1-D38/100)/'General assumptions'!C17*'General assumptions'!#REF!*(1+'General assumptions'!C18/100)","v":{"$error":"#REF!"}},"€"]
[null,"Admin labor lost",{"$f":"C39/'General assumptions'!C17*'General assumptions'!E8*(1+'General assumptions'!C18/100)","v":6197.1830985915494},{"$f":"C39/'General assumptions'!C17*'General assumptions'!E8*(1+'General assumptions'!C18/100)","v":6197.1830985915494},"€"]
[null,"Lawyers' cost",{"$f":"C40/'General assumptions'!C17*'General assumptions'!E9*(1+'General assumptions'!C19/100)","v":600.93896713615027},{"$f":"C40/'General assumptions'!C17*'General assumptions'!E9*(1+'General assumptions'!C19/100)","v":600.93896713615027}]
[null,"Top manager's cost",{"$f":"C41/'General assumptions'!C17*'General assumptions'!E9*(1+'General assumptions'!C19/100)","v":300.46948356807513},{"$f":"C41/'General assumptions'!C17*'General assumptions'!E9*(1+'General assumptions'!C19/100)","v":300.46948356807513}]
[null,"Other company/college cost",{"$f":"(C44+C45+C46+C47)*'General assumptions'!C19/100","v":{"$error":"#REF!"}},{"$f":"(D44+C45+D46+D47)*'General assumptions'!G19/100","v":{"$error":"#REF!"}},"€"]
[]
[null,"Lost income",{"$f":"E36/8/'General assumptions'!C8/'General assumptions'!G12*'General assumptions'!C18*'General assumptions'!C19/100","v":0},0,"€"]
[]
["Recovery value of destroyed equipment and lost licenses",null,30000,30000,"€"]
[]
["Loss of intangible assets",null,0,0,"€"]
[null,"reputation (among stakeholders, incl. customers and employees)",null,null,"€"]
[null,"know-how and trade secrets",null,null,"€"]
[null,"new R&D required",null,null,"€"]
[]
["Legal responsibility",null,0,0,"€"]
[null,"contractual penalties",null,null,"€"]
[null,"external lawyers' fees",null,null,"€"]
[]
[null,"TOTAL COST PER INCIDENT",{"$f":"SUM(C44:C61)","v":{"$error":"#REF!"}},{"$f":"SUM(D44:D61)","v":{"$error":"#REF!"}},"€"]

{"sheet":"Comparison","index":6,"n_rows":29,"n_cols":12,"rows_kept":29,"cut":false,"hidden":false,"merged":[[3,2,3,6],[3,7,3,11],[3,1,4,1]]}
[]
[null,"Losses comparison"]
[]
[null,"Parameter","Internet store",{"$nulls":4},"College"]
[null,null,"Spam","Virus","DDoS","Data theft","Botnet","Spam","Virus","DDoS","Data theft","Botnet"]
[null,"SLE (Single Loss Expectancy)","*",{"$f":"Virus!F34","v":23748.826291079815},{"$f":"DDoS!F23","v":62989.298861663126},{"$f":"'Data theft'!F24","v":1513633.8028169014},{"$f":"Botnet!E30","v":47153.802816901407},"*",{"$f":"Virus!H34","v":40620.305164319245},{"$f":"DDoS!H23","v":20151.211267605635},{"$f":"'Data theft'!H24","v":1216190.1408450704},{"$f":"Botnet!G30","v":50370.140845070418}]
[]
[null,"ARO (Annual Rate of Occurence)","*",0.2,2,0.1,0.1,"*",0.2,0.01,0.1,0.2]
[]
[null,"ALE (Annualized Loss Expectancy)",{"$f":"Spam!E22","v":6670.8888888888896},{"$f":"D6*D8","v":4749.7652582159635},125978.59772332625,151363.38028169013,4715.3802816901407,{"$f":"Spam!G22","v":14154.666666666668},8124.0610328638495,201.51211267605635,121619.01408450704,10074.028169014084]
[]
[null,"TALE (= Total ALE)",null,null,{"$f":"SUM(C10:G10)","v":293478.01243381138},{"$nulls":4},{"$f":"SUM(H10:L10)","v":154173.28206572769}]
{"$rows_empty":16}
["*","the SPAM values were calculated for a year, not for a single occurence"]

{"sheet":"ROSI calculation","index":7,"n_rows":13,"n_cols":16,"rows_kept":13,"cut":false,"hidden":false,"merged":[[10,15,11,15],[1,2,2,2],[1,3,2,3],[1,4,1,8],[1,9,1,13],[1,14,2,14],[1,15,2,15],[10,2,11,2],[10,3,11,3],[10,4,10,8],[10,9,10,13],[10,14,11,14]]}
[]
[null,"Internet store","Total cost","Number of years","Expected reduction rate of ARO and ALE (=Xi)",{"$nulls":4},"ALEi * Xi",{"$nulls":4},"N * sum of ALEi * Xi","ROSI"]
[null,"Mitigation method",null,null,"Spam","Virus","DDoS","Data theft","Botnet","Spam","Virus","DDoS","Data theft","Botnet"]
[null,"IDS/IPS",15000,3,0,0.5,0,0,0.5,{"$f":"Comparison!C10*E4","v":0},{"$f":"Comparison!D10*F4","v":2374.8826291079818},{"$f":"Comparison!E10*G4","v":0},{"$f":"Comparison!F10*H4","v":0},{"$f":"Comparison!G10*I4","v":2357.6901408450703},{"$f":"D4*(J4+K4+L4+M4+N4)","v":14197.718309859158},{"$f":"(O4-C4)/C4","v":-5.3485446009389488E-2}]
[]
[]
[]
[]
[]
[]
[null,"College","Total cost","Number of years","Expected reduction rate of ARO and ALE (=Xi)",{"$nulls":4},"ALEi * Xi",{"$nulls":4},"N * sum of ALEi * Xi","ROSI"]
[null,"Mitigation method",null,null,"Spam","Virus","DDoS","Data theft","Botnet","Spam","Virus","DDoS","Data theft","Botnet"]
[null,"IDS/IPS",15000,3,0,0.5,0,0,0.5,{"$f":"Comparison!H10*E13","v":0},{"$f":"Comparison!I10*F13","v":4062.0305164319248},{"$f":"Comparison!J10*G13","v":0},{"$f":"Comparison!K10*H13","v":0},{"$f":"Comparison!L10*I13","v":5037.0140845070418},{"$f":"D13*(J13+K13+L13+M13+N13)","v":27297.133802816901},{"$f":"(O13-C13)/C13","v":0.81980892018779339}]