HEAC is an eight-phase cycle which can define the process attackers go through before conducting an attack, whether this is formal or informal, or whether they know it or not.