Cybersecurity 2

• 事故(後)報告撰寫(Writing effective postmortems)

  • What happened and when

  • Who was affected

  • What the root cause was

  • How the issue was resolved and when

  • Why it happened, including improvement plans or other remediation actions 改善計畫或其他矯正措施

  • 範例: 502 errors for HTTP(S) Load Balancers
  •  技巧: Tips for Effective Postmortems
• Disaster Recovery Exercise 災害復原演練
• an incident response plan is a document that outlines the procedures to take in each step of incident response 事故應變計畫是一份概述事故應變中每個步驟的程序的文件
• Security analysts monitor networks to identify anomalies and suspicious network traffic patterns 安全分析員監控網路以找出異常和可疑的網路流量模式(特徵)
• we might ask Gemini to explain the mitigation steps in more detail or to rephrase any parts of the explanation that were confusing.  我們可能會要求 Gemini 更詳細地解釋緩解步驟，或重新表述部分令人困惑的解釋
• I've recently become aware of the following vulnerabilities: 我最近認識(意識/了解)到以下漏洞
• Cybersecurity professionals like us play a crucial role in safeguarding sensitive information. 像我們這樣的網路安全專業人員在保護敏感資訊方面扮演著重要的角色
• imagine you're tasked with enhancing the security posture of a non-federal system 想像你被指派要增強一個非聯邦系統的安全勢態
• In the fast-paced world of cybersecurity, staying ahead of threats requires leveraging the latest technology 在快節奏的網路安全世界中，要在威脅面前保持領先，就必須運用最新的技術
• There's never a stupid question. It's important for you to get information and the folks around you should be trying to support you and help you succeed, because they too will succeed with your success 問題從來沒有是愚蠢的。獲取資訊對你來說很重要，你周圍的人應該努力支持您並幫助你成功，因為他們也會隨著你的成功而成功
• In the security industry, you're never going to know everything, and so it's important to stay flexible and fungible and to ensure that you're always learning because the industry changes so quickly and evolves so quickly. 在資安產業中，你永遠不會什麼都知道，所以保持彈性和可替代性，並確保你一直在學習是很重要的，因為這個產業變化得太快且發展得太快了
• Getting involved in cybersecurity organizations and associations is a great way to 加入(參加)網路安全組織或協會對於...是個不錯的方式
• When you feel confident in your abilities, you’re better able to showcase your knowledge about the security industry and demonstrate your ability to work well with a team 當您對自己的能力有自信時，您就能更好地展現您對安全產業的知識，並展示與團隊合作的能力。
• In-person interviews often last an hour or so 面談通常會持續一小時左右
• it allows the employer to understand what choices you made to achieve your desired outcome during a real conflict or challenge 它讓雇主瞭解您在真正的衝突或挑戰中做出了什麼選擇來達到您想要的結果
• Learning about the organization's culture and mission and preparing to demonstrate how you can add value to the team are essential 學習組織的文化和使命，並準備展示您如何能為團隊增加價值是非常重要的
• appropriate; proper 合適的/適當的; 正確的
• Apply the appropriate patch 套用合適(適當)的修補程式
• To date, our investigation has found no evidence of our systems being impacted 迄今為止，我們的調查並未發現任何證據顯示我們的系統受到影響
• Cisco says that they are continuing to investigate the reports but have found no evidence their systems were breached 思科表示，他們仍在繼續調查這些報告，但沒有發現任何證據顯示他們的系統遭到入侵
• BleepingComputer again contacted this third-party vendor to confirm if they suffered a cyberattack but has not received a reply. BleepingComputer 再次聯絡這家協力廠商，確認他們是否遭受網路攻擊，但尚未收到回覆
• My greatest strength is collaborating and driving efficiencies across teams and I have a talent for crafting stories and creating marketing programs to successfully launch technology products 我最大的強項是跨團隊合作並提高效率，而且我擅長編寫故事和創造行銷方案，使其成功推出科技產品
• I am a content strategist and product marketer with over 10 years of experience helping businesses use new technologies to drive success 我是一位內容策略師與產品行銷者，擁有超過十年的經驗，幫助企業運用新科技以驅動成功。
• I am passionate about empowering brands to find and use solutions that work for them and helping builders of new technologies develop even better, more effective products. And most importantly, I value having fun and being collaborative, inclusive, and authentic while I do it 我熱衷於幫助品牌找到並使用適合他們的解決方案，並幫助新技術的建立者開發更好、更有效的產品。最重要的是，我重視在工作過程中享受樂趣、要合作、包容和真誠
• you can interview a handful of your peers. They could be current or former colleagues, classmates, or even family and friends 您可以訪問一些你的同儕。他們可以是現任或前任同事、同學，甚至是家人和朋友
• So I decided to build a knowledge base of common questions and answers that my team could use to not have to start from scratch each time. 因此，我決定建立一個常見問題和答案的知識庫，讓我的團隊可以使用，而不必每次都從頭開始
• How can I help clean this up? How can I make this more efficient 我該如何幫忙清理這？我該如何使這更有效率
• You may not always be aware of your values, but they are always with you even if they shift over time. These are things like integrity, responsibility, and kindness. 你可能並非總是意識到你的價值觀，但它們始終與您同在，即使它們會隨著時間而改變 。這些價值觀包括誠信、責任和善良等
• Your values reflect what's most important to you. They guide your approach to decision-making, developing relationships, and overcoming challenges. 您的價值觀反映了什麼對您最重要。它們引導您做決策、發展人際關係和克服挑戰的方法
• Your motivations stem from your passions and your purpose 你的動機源自於你的熱忱與你的使命
• I am also motivated to help others to express their own truths through authentic storytelling 我也熱衷於幫助他人透過真實的故事表達自己的真實想法
• Your strengths are tasks and activities that you do well 您的強項(優勢)是您擅長的工作和活動
• I then invested a lot of time in developing this skill throughout my life 
• develop 開發/發展/培養/建立 之後，我在生活中投入了大量時間發展這項技能
• Your career identity is the unique value that you bring to the workforce based on who you are and what you have to offer now and in the future 你的職場身份，就是基於你的個性和才能，以及你現在和未來能夠為職場貢獻的獨特價值
• the better equipped you are to choose a path that aligns with your strengths, values, and goals. 你將更能夠選擇一條與你的長處、價值觀以及目標相符合(匹配)的道路
• Remember, no matter what your life and work experiences are, we all have value to offer. 請記住，無論您的生活和工作經歷如何，我們都有可以提供的價值。
• Research shows that having a strong career identity leads to positive outcomes such as improved job performance, greater commitment to a meaningful career, and even enhanced well-being and health. 研究顯示，擁有強烈的職涯認同會帶來正面的結果，例如改善工作表現、更致力於有意義的職業，甚至提升幸福感和健康
• maybe you've developed skills like patience, empathy, and problem-solving as a result of caring for a family member 也許您因為照顧家人而培養出耐心、同理心、解決問題的能力
• For example, maybe you're very detail-oriented or you're great at building relationships 例如，也許您非常注重細節，或者您擅長建立人際關係
• One of the best ways to explore your career identity is to write your own career identity statement 探索自身的職場身份最好的方法之一就是自行撰寫職場身份聲明
• Joining different security associations is a good way to connect with others. 加入不同的安全協會是與他人聯繫的好方法
• Hi, Tim. I recently completed the Google Cybersecurity Certificate program, and I’d like to connect with other security professionals. It seems like you have a lot of experience in the security industry that I can learn from. Let’s keep in touch!
• OWASP Top 10: A globally recognized standard awareness document that lists the top 10 most critical security risks to web applications 全球公認的標準認知(意識)文件，列出 Web 應用程式十大最重要的安全風險
• How can engaging with the security community help newcomers establish a security career 與安全社群接觸如何幫助新人建立安全職業生涯
• through networking and figuring out where my areas of interest lie, I actually was able to get into this field and grow and advance within this field 透過人際網路和找出我的興趣領域(地方)，我實際上能夠進入這個領域，並在這個領域中成長和進步
• the importance of staying engaged with the cybersecurity community 與網路安全社群保持聯繫的重要性
• The security industry is always evolving, so it’s important that security professionals continue to learn about the field (網路)安全產業一直在演進，因此安全專業人員必須持續學習這個領域
• let's discuss ways to effectively use social media to establish or advance your security career 讓我們來討論如何有效利用社交媒體來建立或提升您的(網路)安全職業生涯
• Social media is a great way to connect to other security professionals in the industry 社交媒體是與業界其他安全專業人員聯繫的絕佳方式