
Category Archives: Security
CISSP考試心得 – 薛智元 (Sam)
CISSP考試心得 – 詹志閔 (James)

My Golf Practice Plan
Golf Shots
- Iron shot (鐵桿揮桿)
- Driver swing (一號木揮桿)
- Fairway shot (球道擊球)
- Pitch shot (劈起球)
- Chip shot (切球)
- Bump and Run shot
- Lob shot (高吊球)
- Flop shot (高拋球)
- High and Low shot
- Fade and Draw shot
- Rough shot (長草區擊球)
- Slope shot (斜坡擊球)
- Bunker shot (沙坑擊球)
- Putting (推桿)
Golf Shots
Continue readingYou Are The Legend – Madunix, RIP!


I’m so astonished and sorry to hear about your passing away when sharing my kitty with you, and I received this unbelievable message from your son today.
I know you because you are the author of the CISSP Process Guide and have made significant contributions to experts-exchange and community groups. I know more about you after you generously reviewed my book without a penny, and our exchanges of messages on Facebook and WhatsApp from time to time.
Even though we don’t meet in person, your generosity, friendliness, insights, and contributions to the community have a profoundly positive impact on me. You are the model for me and the WUSON family in Taiwan!
Thank you so much, Fadi! I will miss you! You are the legend – Madunix, RIP!🙏
WUSON Glossary
- Vision: description of a better future state.
- Goal: statement of success criteria for fulfilling the vision.
- Objective: specific, measurable, achievable, realistic, and timely (SMART) description of the future state.
- Strategy: high-level approach or plan to achieve goals.
- Risk: “effect of uncertainty on objectives.” (ISO 31000)
- Opportunity: risk with positive effect.
- Threat: risk with negative effect.
- Probability: quantitative measure of uncertainty.
- Likelihood: qualitative measure of uncertainty.
- Control: means for risk treatment to prevent the situation from being out of control if a risk materializes.
- Problem: instance of an issue, incident, condition, or obstacle that hinders the fulfillment of objectives, goals, or vision.
- Value: anything of importance, significance, or use that can be measured qualitatively or quantitatively.
- Asset: anything of value and worthy of protection.
- Business value: the value generated by an organization or organizational unit.
- System: a “combination of interacting elements organized to achieve one or more stated purposes.” (ISO/TS 14812:2022)
- Analysis: process to get insights by dividing a complex or complicated thing into smaller, simple units.
- Evaluation: process to gather information or collect evidence to inform, support, and justify decisions.
- Operations: Operations: ongoing activities or daily routines to support the delivery of products and services.
- Configuration: the “manner in which the resources of an information processing system are organized and interconnected.” (ISO/IEC 20944-1:2013)
- Architecture: the artifact describing the principal elements and their relationship, interaction, and boundaries. Architecture is a crafted structure with a focus on the principal elements.
- Structure: the natural or crafted formation of a system describing the constituent elements and their relationship, interaction, and boundaries.
- Design: the documented solution, “the result of the design process” (ISO/IEC/IEEE15288:2015) that can meet stakeholders’ requirements. The design process typically starts with addressing architectural concerns or the so-called “architectural design.”
- Baseline: the “version of the approved set of one or more work products, items or elements that serves as a basis for change.” (ISO 26262-1:2018)
Note 1 to entry: See ISO 26262-8:2018, Clause 8.
Note 2 to entry: A baseline is typically placed under configuration management.
Note 3 to entry: A baseline is used as a basis for further development through the change management process during the lifecycle. - Change: “the transition from a current state to a future state.” (ACMP)
- Requirement: documented needs and expectations of stakeholders.
- Entity: anything with an identity.
- Identity: one or a set of attributes used to distinguish one entity from another uniquely.
- Authentication: the process of assuring a subject’s claimed identity is genuine by verifying its authenticator.
- Authorization
- Accounting
- Testing: process for a tester to exercise the system under test (SUT) or target of evaluation (TOE) and evaluate if the actual outcome matches his expected outcome.
- Engineering
- Assurance
- Management: a systematic approach (e.g., PDCA) to achieving objectives.
- Governance: a systematic approach (e.g., Evaluate, Direct, and Monitor by ISO 27014) for the highest organizational level of authority (e.g., state governor) to achieve the organization’s objectives.
- Security: assured state achieved by implementing controls to protect assets from risk to achieve objectives.
Logical Terms
Ground refers to the underlying reason, basis, or justification for holding a belief or making a claim. (ChatGPT)
Evidence refers to information, facts, or data that support a claim or belief. It is used to demonstrate or establish the truth of a proposition. (ChatGPT)
Belief is an attitude or mental state in which a person accepts something as true, real, or valid, even in the absence of definitive proof. (ChatGPT)
Claim is a statement that requires grounds or evidence.
Proposition is a statement that bears a truth value (true or false).
Assertion is a proposition that is always true.
Argument is a set of propositions divided into one or more premises and one and only one conclusion.
Assurance refers to grounds for justified confidence that a claim has been or will be achieved. (NIST SP 800-160v1r1 from ISO/IEC 15026-1:2019)