As part of a formal risk assessment of desktop systems in a small accounting firm with limited IT support, you have identified the asset "integrity of customer and financial data files on desktop systems" and the threat "corruption of these files due to import of a worm/virus onto systems."
Suggest reasonable values for the items in the risk register for this asset and threat, and provide justifications for your choices.