Multi-Topic Review: Cybersecurity • PAF Flight Plan 2040 • Listening & Reading • AFP Promotion & Welfare • PMS • Enlistment

Importance of Cybersecurity

• Protects organisations from cyber-attacks that lead to data breaches, loss of brand reputation and $financial$ damages.

• Shields data, systems and networks from malicious activity while ensuring confidentiality, integrity and availability (CIA).

• Builds workforce awareness: employees learn to recognise threats and respond properly.

What Is Cybersecurity?

• Protection of networks, devices & data against unauthorised access.

• Guarantees CIA triad of information.

• Modern life dependence: entertainment, transportation, communication, shopping, medicine—all rely on IT.

• Everyday question: How much of your life/personal info resides on your device or another system?

Risk & Vulnerability

• Typical dangers:

  • Malware wiping entire system.

  • Intruder altering files.

  • Compromised machine used to attack others.

  • Stolen credit-card info for unauthorised purchases.

• No absolute guarantee of safety—only risk minimisation.

• Sectors especially vulnerable:

• ·         Financial institutions and banks

  ·         Internet service providers

  ·         Pharmaceutical companies

  ·         Government and defense agencies

  ·         Contractors to various government agencies

  ·         Multinational corporations
  
  

Fundamentals – CIA Triad (aka AIC)

Confidentiality

• Hide information from unauthorised viewers.

• Most attacked pillar.

Integrity

• Ensure data remains accurate, complete and unaltered from original source.

• Example attack: intercept & modify data in transit.

Availability

• Info must be accessible to authorised users whenever needed.

• Denial-of-Service attacks target this pillar.

Cybersecurity Attack Classes

• Active Attacks – modify data stream, create false statements (e.g., protocol manipulation).

• Passive Attacks – eavesdropping/monitoring without altering resources.

Cybersecurity Threat Definition & Sources

• "Threat" = malicious act aimed at damaging, stealing or disrupting digital life (viruses, DoS, breaches, etc.).

• Main threat actors:

  • Hacktivists – political/ideological agendas.

  • Hostile Nation-States – propaganda, espionage, critical-infra sabotage.

  • Disgruntled Insiders – authorised users abusing access.

  • Corporate Spies & Organised Crime – industrial espionage, large-scale theft.

  • Script Kiddies – low skill, use premade tools.

  • Cyber-Terrorists – cause fear via infrastructure attacks.

  • Automated Bots – autonomous scanning, DDoS, malware spread.

  • Third-Party Vendors – weak links in supply chain.

  • Hackers (generic) – exploit zero-days for challenge, ego or profit.

Why Hackers Hack

• $\text{Financial gain}$ – ransomware, data theft, cryptojacking.

• $\text{Ideology / Politics}$ – protest, support causes.

• $\text{Espionage}$ – corporate/state secrets.

• $\text{Revenge}$ – personal vendettas.

• $\text{Challenge/Ego}$ – skill proving.

• $\text{Learning}$ – experimentation.

• $\text{Chaos}$ – DDoS etc.

• $\text{Corporate or National objectives}$.

Hacker Taxonomy

• White Hat – ethical hackers/pen-testers.

• Black Hat (Cracker) – unauthorised access for personal gain.

• Grey Hat – break in without permission, then disclose.

• Script Kiddie – unskilled tool user.

• Hacktivist – socio-political messaging.

Common Threats & Attacks

• Malware (viruses, worms, Trojans).

  • May require user action or exploit software flaws automatically.

• Phishing – deceptive e-mails steal credentials/CC data; uses fake domains.

• Spyware – hides, streams real-time data to attacker.

• Ransomware – encrypts files, demands crypto payment.

• Trojans – masquerade as legit software.

• Man-in-the-Middle (MITM) – intercept & alter comms.

• SQL Injection – inject malicious SQL to manipulate DB.

• Zero-Day Exploit – leverages unknown vulnerability.

Top $10$ Cybersecurity Threat Themes

1. Social Engineering

2. Third-Party Exposure

3. Configuration Mistakes

4. Poor Cyber Hygiene

5. Cloud Vulnerabilities

6. Mobile Device Weaknesses

7. Internet of Things

8. Ransomware

9. Poor Data Management

10. Inadequate Post-Attack Procedures

Social Engineering

Why Effective

• Exploits human psychology: trust, urgency, authority, fear.

• Bypasses tech controls (firewalls, encryption) by targeting people.

• Builds rapport, targets weakest link (users).

Categories & Tactics

• Human-Based

  1. Impersonation

  2. Vishing (voice phishing)

  3. Eavesdropping

  4. Shoulder-Surfing

  5. Dumpster Diving

  6. Reverse Social Engineering

  7. Piggybacking

  8. Tailgating

• Computer-Based

  1. Phishing

  2. Spear-Phishing

  3. Vishing (overlap)

  4. Pretexting

  5. Baiting

  6. MITM

  7. Fake Quizzes/Surveys

  8. Malicious Websites

• Mobile-Based

  1. Publishing malicious apps

  2. Repackaging legit apps

  3. Fake security apps

  4. SMiShing (SMS phishing)

Counter-Measures

• Organisation-wide policies + user training.

• Signed acknowledgement of policies.

• Least-privilege access, 2-FA, incident response, change mgmt, software patching.

Cybersecurity Best Practices (20-Point List)

1. Strong, unique passwords (use managers).

2. Multi-Factor Authentication.

3. Regular software updates/patching.

4. Firewalls & antivirus; frequent scans.

5. Encrypted, multi-location backups.

6. Employee education & simulated phishing.

7. Least-privilege access reviews.

8. Secure Wi-Fi (WPA$3$) & VPN.

9. Continuous monitoring & incident response plan.

10. Mobile-device security (encryption, remote wipe).

11. Caution with e-mail links/attachments.

12. Data encryption $\text{AES-256}$ in transit & at rest.

13. Network segmentation, VLANs, monitoring.

14. Endpoint patching, device locks.

15. Controlled physical access (biometrics/keycards).

16. Disaster recovery & business continuity plans.

17. Clear security policies; ensure compliance.

18. Vigilance against social engineering.

19. Strong remote-access authentication.

20. Regular audits & penetration testing.

Philippine Air Force (PAF) Flight Plan $2040$

• Vision $\rightarrow$ "Credible & Agile Air Force, adaptable to modern warfare, responsive to national & regional security/development" by $2040$.

• Logo symbolism:

  • Year $2040$ in gold = breakthrough year.

  • Roundel = PAF ownership.

  • White Philippine map = peace/purity; territory to defend.

  • White heading indicator = stable focus & strategic direction.

  • Gold edge circle = excellence (Gold Trailblazer Award).

• Critical terms: Credible, Agile, Modern Warfare, Regional Security.

• Anchored on mission to provide air power for AFP; guided by INSTEP core values (Integrity, Teamwork, Professionalism, Service Above Self, Excellence).

• Strategy Map Perspectives (bottom↑): Resources $\rightarrow$ Learning & Growth $\rightarrow$ Support Systems $\rightarrow$ Core Systems $\rightarrow$ Strategic Impact.

• Leadership: build adaptive, resolute, flexible leaders; doctrine grounded yet dynamic.

• Organisation: align with AFP future force; enable multi-domain operations; emphasise safety & generative safety management.

Effective Listening

Bad Habits

1. Learned non-listening.

2. Planning reply instead of listening.

3. Talking when should listen.

4. Hearing expected, not actual.

5. Inattention due to preoccupation, prejudice, self-centredness, stereotyping.

Becoming Effective

1. THINK: grasp listening complexities; prepare (long-, mid-, short-term); adjust to situation (rest, hunger, comfort, emotion, knowledge).

2. FEEL: desire to listen; delay judgement; admit biases; don’t tune out "dry" topics; accept responsibility; encourage speaker (stop talking, positive feedback, questions, empathy, confidentiality, reciprocity).

3. DO: eye contact; effective notes (key ideas, highlight); physical involvement (posture, facial cues, applause, participation, smile); exercise "listening muscles" (vocabulary stretch); follow Golden Rule.

Effective Reading

• Comprehension = receptive (literal) + reflective (interpretive).

• Methods: preview, skim/scan, set purpose (THINK), read, re-think, rephrase.

• Speed goals: increase span of recognition, eliminate regression, remove sub-vocalisation (eyes $\rightarrow$ lips $\rightarrow$ throat $\rightarrow$ brain chain).

• Overcome vocab difficulties: dictionary, word lists, wide reading.

AFP Enlisted Personnel Promotion System (Circular $1$ \& related docs)

Philosophy

• Promotions recognise potential to perform next-higher duties; only best qualified chosen through systematic, fair, objective evaluation.

• Command responsibility: commanders remedy impediments & assist paperwork.

Key Definitions

• PRW – Promotion Rating Worksheet (standard scoring up to $70$ admin pts + $30$ board).

• ACS – Active Cumulative Service.

• TIG – Time-in-Grade.

• Tenure – Max years one may stay in grade.

• Core Competency / MOS – job-specific skill.

• TO – Table of Organisation.

Eligibility Highlights

1. Position per TO: occupy billet matching target rank $\ge 6$ months before effectivity.

2. Career & Leadership Courses:

   • Basic NCO (A1C $\rightarrow$ SGT/SSG)

   • Advanced NCO (SSG $\rightarrow$ TSG/MSG)

   • Sergeant-Major Course (MSG $\rightarrow$ SMS/CMS).

3. Time-In-Grade & Tenure (new rules)
   
   \begin{aligned}
   \text{TIG}:& \;\text{MSG}=6,\;\text{SSG/TSG}=5,\;\text{SGT}=4,\;\text{A1C}=3,\;\text{AM\text{–}A1C}=3\
   \text{Tenure}:& \;\text{MSG}=8,\;\text{SSG/TSG}=7,\;\text{SGT}=6,\;\text{A1C}=5,\;\text{AM/A2C}=4
   \end{aligned}
   
   

4. PROMEX & SKT – half-TIG eligible; E-$8$/E-$9$ exams only at OTAG.

Disqualification (selected)

• AWOL/deserter, under arrest, non-LOD sickness, unsat PER, retirement application, three PROMEX/PFT flunks, over-tenure, etc.

Promotion Types

• Regular – permanent; vacancies governed by authorised troop strength; effective $01\,Dec$.

• Temporary – fill unused quota (E-$3\rightarrow$E-$7$); lasts $1$ year or until requirements met.

• Special – outside quota limits, recognising extraordinary achievement:

  1. Outstanding Students (top $3$, $\ge95\%$, class $\ge25$, course $\ge12$ weeks).

  2. Meritorious Promotion.

  3. EP of the Year winners.

  4. After Commissioned Active Duty (CAD).

  5. $1$-yr pre-retirement (E-$2$–E-$6$).

  6. Following Demotion.

  7. Posthumous.

Promotion Board Composition

• $1$ LtCol–Maj, Unit Sergeant-Major, $3$ senior NCOs.

Scoring (Admin $70$ / Board $30$)

• ACS $10$, TIG $10$, Exams $10$, Education $8$, PFT $8$, PER $8$, Awards $8$, Assignment $8$.

Morale & Welfare – Medical Reimbursement

Eligible Patients

1. Active military & dependents.

2. CAFGU, cadets, trainees.

3. Civilian Human Resources (CHR) on PAF plantilla.

Coverage & Limits

• Combat/LOD: no cap.

• Non-combat military: up to $\text{PHP}\,100,000$.

• Dependents at MTF/CHR: up to $\text{PHP}\,50,000$.

• CHR in civilian hospital: up to $\text{PHP}\,20,000$.

• Priority order: combat cases $\rightarrow$ emergency $\rightarrow$ others.

• Claim within $3$ months of discharge; board evaluation; approving authorities:

  • $\le\text{PHP}\,25,000$ – A-1

  • $25!K{-}50!K$ – CAS

  • $50!K{-}75!K$ – VC, PAF

  • $75!K{-}100!K$ – CG, PAF

Funeral Honors & Services

• Granted to veterans, retirees, honourably separated, active personnel & designated VIPs.

• Components: vigil guard, escort, flag, transportation, interment at Libingan ng Mga Bayani, wreath, obituary, necrological rites, half-staff flag, pall-bearers.

PAF Mortuary & Religious/Social Fund Association (MRS-SFA)

• Mandatory members: officers, EP, civilian employees, cadets, P2LTs, CS, trainees.

• Contribution $\rightarrow$ $PHP\;80$ (now $PHP\;120$) monthly.

• Benefits: member death $PHP\,120,000$; qualified dependents $PHP\,20,000$.

• Beneficiary hierarchy based on marital status (spouse/children $\rightarrow$ parents $\rightarrow$ designated relatives).

AFP Performance Management System (AFP-PMS)

• Measures unit performance (operational readiness via TO&E, OPREVAL, PPBER) and individual performance (tasks vs targets).

• Key docs: Circular $04\,(2003)$ Officers; Circular $16\,(1993)$ EP.

Roles

• Ratee – lists duties & contributions.

• Rater – direct superior; mentors, observes, rates; provides feedback.

• Endorser – verifies accuracy & alignment.

• Adjutants/Process Owners – manage forms, monitor chains, archive.

Rating Cycle

• Officers: Jan/Jul; EP: Feb/Aug.

• Scale $1$ (Poor) $\rightarrow$ $5$ (Outstanding).

Feedback Sessions

• Initial & Mid-term (face-to-face) using Performance Feedback Form.

• PER used for promotions, awards, training, separation.

Appeals

• Within $120$ days: administrative errors or substantive biases; submit memo with evidence.

Sanctions

• Late or dishonest reports subject to disciplinary action per SOP $09\,\;16 Oct 2003$.

Enlistment & Re-Enlistment

Enlistment

• Regular: $3$-year initial term after selection & training (requirements: natural born, single, good moral, min $5'0''$, K-12 or $\ge72$ college units, $18{-}26$ years, pass AFPSAT/PAFGCT, physical fit).

• Special: direct enlistment for highly desirable skills; age $18{-}35$; still must take Basic Military Training within first term.

• Indigenous People height waiver allowed with NCIP certification.

Re-Enlistment

• Renewal term $6$ years; application $\ge6$ months before ETE; mandatory physical every $3$ years.

• Qualifications: honourable prior service, physical/mental fitness, good morals.

• Disqualifiers include psychoneurotic tendencies, addiction, imprisonment, dishonourable discharge, multiple AW105 punishments, drug use, moral-turpitude cases, desertion, marginal efficiency.

Term Rules

• Automatic discharge at ETE unless reenlisted/extended.

• During war/national emergency: term extends $6$ months post-emergency.

• Overseas contingency: extends $2$ months post-return.

• Ongoing court case (service-connected) or LOD sickness: term extends until resolution/recovery (hospitalisation <= $1$ year).

Grade on Re-Enlistment

• Same grade if reenlisted day after discharge.

• If reenlist within $60$ days but gap, may drop $1$ rank.

• Special cases: reserve officer tour, PMA cadet dropouts, acquitted personnel—varied rules.

Extensions

• Up to $18$ months for completing requirements before compulsory retirement.

Dependency Discharge & Hardship

• Only after half of current term completed.

Authorised ICIE

• Clothing & equipment issued in-kind/in-cash every $3$ years to all EP.

QUICK REVIEW QUESTIONS (sample exam-prep)

1. AFP-PMS monitors individual performance via Balanced Scorecard aligned to goals.

2. Rater = immediate superior with direct supervision.

3. Rating value 5 = Outstanding (consistently exceeds expectations).

4. PER appeal window: $120$ days.

5. Officers $O!\ge6$ in key positions use Narrative PER.