Please respond to the questions below. Answers should be short but exhaustive, covering all questions. Also, you must justify your point of view.

Michael is the IT head of a company and decided that the security operations should be outsourced to a MSSP$.$ Explain the kind of risk posture or strategy.

Rosalind, the systems administrator, heard that the information in the SSD can be destroyed by degaussing. What do you think?

What is the difference between spear phishing and whaling? What of the two would be a massive email sent to all employees of a company pretending to be from the payroll department?

What kind of risk treatment control is a firewall? Indicate an example of an administrative control.