Containment

1. It is to stop the attack from spreading.
2. It protects other computers in the network.

Disconnect the internet cable from the infected PC. Saved assistant message 2026-06-24 01:07

Eradication

1. It is to remove the virus or root cause.
2. It ensures the system is clean.

Delete the malware file or format the hard drive. Saved assistant message 2026-06-24 01:07

Recovery

1. It is to restore the system to normal.
2. It makes the business work again.

Restore data from a backup Saved assistant message 2026-06-24 01:07.

PDPA

1. It is a law to protect personal data.
2. It prevents illegal use of customer info.

A company cannot sell your phone number to others. Saved assistant message 2026-06-24 01:07

PDCA

1. It is a cycle for continuous improvement.
2. It helps to update security regularly.

Plan $\rightarrow$ Do $\rightarrow$ Check $\rightarrow$ Act. Saved assistant message 2026-06-24 01:07

SoA

1. It is a checklist of security controls.
2. It shows which controls the company uses.

A list showing "We use Firewall" and "We use Antivirus." Saved assistant message 2026-06-24 01:07

VA

1. It is a passive scan to find weaknesses.
2. It only lists the problems (no attack).

Using a software to scan for old/outdated Windows. Saved assistant message 2026-06-24 01:07

PT

1. It is an active attack to test security.
2. It proves if a hacker can really get in.

A professional hacker trying to break into the system. Saved assistant message 2026-06-24 01:07

Mitigate

1. It is to reduce the risk.
2. It makes the attack less likely to happen.

Installing a Firewall or Antivirus software. Saved assistant message 2026-06-24 01:07

Transfer

1. It is to share the risk with others.
2. It reduces financial loss if an attack happens.

Buying Cyber Insurance or outsourcing to experts. Saved assistant message 2026-06-24 01:07

Residual Risk

1. It is the remaining risk.
2. It is the risk left after putting security.

Even with Antivirus, there is still a 1% chance of attack. Saved assistant message 2026-06-24 01:07

Nmap

1. It is used for port scanning.
2. It finds "open doors" in the network.

Scan a server to see if "Port 80" (Website) is open. Saved assistant message 2026-06-24 01:07

SQL Injection

1. It is used to bypass login.
2. It attacks the database via web forms.

Entering special code in the "Username" box to login. Saved assistant message 2026-06-24 01:07

Hydra

1. It is used for brute force attacks.
2. It tries many passwords automatically.

Trying 1,000 passwords in 1 minute to find the right one. Saved assistant message 2026-06-24 01:07