An attacker sends an Excel file with an embedded macro to several employees of a company. The aim is to gain access to their computers.

In which phase of the kill chain does this normally happens?

Put the phases of the cyber kill chain in the right order.

A company regularly sends confidential customer data by email. To increase efficiency, the attachment is sent in a compressed ZIP file - but without password protection or encryption.

What principles of the CIA triad is/are potentially violated here?