To expand :
X number of staff, Y% using P2P, multiplied by Z lost hours = Total Lost
Cost per Productivity
Now.
X number of staff, Y% using P2P, multiplied by Z kbps per connection per
hour = Total Wasted bandwidth per hour
Also
X number of staff, Y% using p2p, of which Z% are downloading and
installing malicious software, multiplied by hours per user for cleanup
= Total lost IT Time
Also
X number of staff, Y% using p2p, of which Z% are downloading illegal
content = Total Risk from Illegal Content
The list of Risks is vast
1). Exposing internal/confidential Files
2). Malicious downloaded content (virii, trojans, etc.)
3). Possibility of crashing routers/firewalls or DOS'ing the connection
on a high speed connection using bit-torrent type p2p.
Eric.
-----Original Message-----
From: OBrien, Brennan [mailto:BOBrien@columbia.com]
Sent: Wednesday, December 01, 2004 8:15 AM
To: Joel Merrick; security-management@securityfocus.com
Subject: RE: How much does P2P cost businesses?
I'd doubt there are any definitive studies on this, but you can
reasonably ascertain the impact...
X number of staff, of which Y% use P2P services, $Z burdened cost per
hour.
Risk: Illegal file sharing leads to lawsuit. 1% probability, huge
cost.
Risk: Users accidentally expose internal confidential information. 1%
probability, moderate cost (potentially high depending on your
environment).
Risk: Lost time spent dinking around with this stuff. 100% probability,
small incremental cost.
Now you've got everything you need to make a valid assessment of impact
(except, perhaps, the back half of the equation -- what you would do to
stop it, and how that would impact the bottom line in comparison to the
original calculation... that delta value is your budget).
Brennan
-----Original Message-----
From: Joel Merrick [mailto:joel@servicestyle.com]
Sent: Wednesday, December 01, 2004 6:39 AM
To: security-management@securityfocus.com
Subject: How much does P2P cost businesses?
Hi all
I'd be interested if anybody has any links to reports or other
quantative info about how much P2P or other file sharing costs
businesses.
I've seen a couple of links in the past, however I can't find them.
Any help would be glady appreciated.
Many thanks,
Joel
--
Joel Merrick
email: <joel@servicestyle.com>
mobile: 07929 208 567
ServiceStyle Ltd. - Manchester's Technology Experts
https://www.servicestyle.com
GPG Public Key - https://www.servicestyle.com/joel_servicestyle.asc
