A security operations team is preparing a budget submission for an email security awareness campaign. Their research has revealed the following information:

10,000,000 emails are received by the company every year.

0.2% of these emails contains some variety of malware.

Of the malware found, 5% is identified as ransomware.

The current anti-malware solution used by the company has a 95% success rate against known ransomware variants.

Previous drills have shown that 20% of malicious emails are opened by staff.

The average damage done by a single ransomware outbreak is $250,000. The operations team is proposing a combination of new technology and staff awareness training that will cost $500,000 over three years.

Based on the above information, calculate following:

Number of emails contains Malware. (1 Mark)

Number of emails identified as Ransomware. (1 Mark)

How many emails opened by Staff? (1 Mark)

How much cost ransomware outbreak? (1 Mark)

What is the name of new proposed solution and what it cost? (1 Mark)

Based on the risk assessment, is the new proposal a sound investment? (1 Mark)