Wiki
Foundational cybersecurity and AI security reference articles for Hong Kong operators — including prompt injection, HKCERT context, and zero trust.
Reference that travels
Security programmes stall when engineering, risk, and leadership use different definitions. HKISG wiki articles give Hong Kong organisations a neutral baseline — linked to our glossary, education modules, and assessment rubric.
Shared vocabulary is the cheapest control most teams never implement.Wiki programme intent
Topics covered
- Fundamentals: Core security concepts for mixed-experience teams.
- Frameworks: Zero trust, incident response, and network segmentation in operator language.
- Hong Kong context: Privacy, governance, and regulatory considerations for local estates.
- Emerging areas: AI security and governance as adoption accelerates across sectors.
Using wiki with other programmes
Assign wiki readings before education modules, attach links to board papers, and reference articles when scoping Trust Review evidence. For term-level clarity, cross-check the Glossary.
Reference articles
Foundational pages maintained by the HKISG editorial programme.
AI Security and Governance
As organisations increasingly adopt artificial intelligence, new security challenges emerge that differ significantly from traditional cybersecurity threats. AI systems introduce…
Cybersecurity Fundamentals
Cybersecurity is the practice of protecting computer systems, networks, programmes, and data from unauthorised access, attack, or damage. It encompasses a wide range of…
Deepfake Fraud in Hong Kong — Operator Guide
How AI-enabled deepfake voice and video fraud hits Hong Kong finance and SMEs, what controls actually work, and how to brief boards without panic language.
HKCERT and HKISG — How They Differ
A practical guide for Hong Kong cybersecurity and AI security teams: how HKCERT (national CERT) differs from HKISG (independent membership trust programmes), when to use each, and how they should work together.
Incident Response Planning
A well-prepared incident response (IR) plan can mean the difference between a contained security event and a devastating breach. Hong Kong organisations face specific regulatory…
Network Security Best Practices
Network security involves protecting the integrity, confidentiality, and availability of data as it travels across networks. For Hong Kong organisations, this includes compliance…
Prompt Injection
A Hong Kong operator guide to prompt injection — how LLM and agent attacks work, why they matter under PDPO and AI security programmes, and what good controls look like.
Ransomware for Hong Kong SMEs
A practical ransomware readiness guide for Hong Kong SMEs — backup restore proof, privileged access, payment pressure, and when to call HKCERT versus using HKISG materials.
Understanding Hong Kong Data Privacy Laws
Enacted in 1996 and amended multiple times since, the PDPO is Hong Kong’s primary data protection legislation. It applies to the collection, holding, use, and disclosure of…
Zero Trust Architecture: Definition, Principles, and Real-World Applications
Zero Trust Architecture (ZTA) is a cybersecurity framework based on the principle of “never trust, always verify,” ensuring that no user or device is trusted by default. This…
Frequently asked questions
- How is the wiki maintained?
- Reference articles are reviewed by the Editorial Council on a scheduled cycle and updated when frameworks or local context change. Corrections are dated under Editorial Standards.
- Can I cite wiki pages externally?
- Yes, with attribution and the page URL. Wiki content is educational reference — not regulatory guidance or formal audit opinion.
- What is the difference between wiki and glossary?
- The Glossary defines individual terms. Wiki articles explain concepts, frameworks, and practices in depth — often linking to multiple glossary entries.
- How does wiki content relate to Trust Review?
- Wiki pages describe good practice aligned with rubric domains. Public scores are earned only through the Assessment Methodology — reading wiki content does not alter ratings.