alert messages when downloading potentially harmful files, which makes them more susceptible to attacks. Therefore, users should use the malware defence products effectively to prevent unnecessary successful cyber-attacks. 3. Acknowledging different types of cyber attacks In the software cybersecurity market, there are many different types of malware defence products. It is essential to gain a holistic view of the risks associated with cyber attacks so users purchase the most effective malware defence software. The three main pillars of the risks are threat type, likelihood of occurrence score, and Vulnerability. The relationships between the three pillars of risks are as follows. If the threat is low, suggesting that attacking results in a limited effect on a micro and macro scale, an attacker requires a low level of IT skills; thus, the vulnerability and the likelihood of the attack would be high. On the other hand, if the threat is high, meaning that attacking results in a limited effect on a micro and macro scale, the vulnerability and the likelihood of the attack would be low. It is important to acknowledge what kind of data and information you aim to protect and purchase the malware software accordingly. Since man-on-the-side attack relies on accurate timing, it is considered to have a high threat but low likelihood of occurrence and vulnerability. Therefore, the extent to which households need to purchase malware defences to prevent man-on-the-side attack would not be necessary. Ways to prevent and mitigate attacks on a macro level 1. Promoting digital safety and security through knowledge, skills and innovation The government should urge technological firms to perform advanced research and development to produce safe digital technologies and infrastructures. This could enhance safe and secure digital practices at all levels of society. For example, in Austria, this is one of the main strategies the government aims to adopt for the development of security technology. R&D may include developing and strengthening cyber-security programmes, and providing training for the emergence of cyber-security experts. 2. Enhancing Crisis Response As technology advances, there are simultaneously greater varieties of attacks that occur. Governments are encouraged to go beyond their understanding from professional and educational knowledge and to exercise a contingency plan through simulated cyber incidents to gauge a practical level of preparedness. Therefore, this enhances the government's resilience in mitigating and adapting to risks posed by cyber attacks. The government must be aware of the budget allocated in