A company experiences an average of 25 malware outbreaks per year. Each event costs the company $10,000 to clean up.
What is the annualized loss expectancy (ALE)?
In designing a solution to the problem, at what point will the firm hit the law of diminishing returns?