Jan needs to build the business case for the implementation of a new firewall. She’s confident that she can show that the new firewall will require less attention from the security staff and will result in significant manpower savings. She does not expect that there will be any change (positive or negative) in the security posture of the organization based on this implementation. What type of approach is best suited to building the business case for this firewall? a. Qualitative b. Quantitative c. Combination of qualitative and quantitative