网络安全
现场常见问题
Most incidents start with a person: a phishing click, the same password everywhere, or a payment made on a fake email. Most training material is in English with examples from American banks, not the WhatsApp messages Lao staff actually receive.
Training that works is short, concrete and repeated. We teach in Lao, Thai and English using what staff really see: fake invoice emails, WhatsApp messages saying "the boss needs this transfer now", malicious QR codes and fake Microsoft 365 login pages.
What the programme includes
- Live sessions (in the room or online) for everyone, plus focused modules for finance, HR and executives
- Phishing simulations at intervals to measure click rate and report rate. The second number matters more: staff who report quickly protect the whole company.
- Monthly micro-lessons of 5–10 minutes with a short quiz
- Topics: passwords and MFA, phishing, social engineering, USB sticks, working outside the office, and how to report something suspicious
Why repeat it
People forget. One session with no follow-up fades within months. A continuous programme, with attendance records and per-department results, also shows management what they're getting for the money.
功能
Three languages
Lao, Thai and English for mixed teams.
Phishing simulation
Measures results and shows whether people actually improve.
Real-life examples
Fake invoices, WhatsApp scams, QR codes and fake logins.
Role-based modules
Finance, HR, IT and executives face different risks.
Measurable
Click and report rates by department.
Training records
Who attended, when, and how they scored.
设计与实施
- 1
Set a baseline with a first phishing simulation
- 2
Design the curriculum by role and language
- 3
Run live sessions and open the online lessons
- 4
Regular simulations; anyone who clicks gets a short lesson on the spot
- 5
Quarterly results report to management
适用场景
- Banks and microfinance lenders whose branch staff deal with customers directly
- Ministries and provincial departments with large workforces
- Hotels whose front desks get fake booking emails
- Schools and universities, for teachers and staff
常见系统规模
Kick-off
适用于: One-off session, up to 100 staff
- 2–3 hour live session
- One phishing simulation
- Handouts in three languages
Annual Program
适用于: 12 months, continuous
- Monthly simulations
- Micro-lessons and quizzes
- Quarterly reports
Leadership & High-risk Roles
适用于: Executives, finance, HR, IT
- Workshop on BEC and payment fraud
- Incident tabletop exercise
- Password and MFA policy review
我们供货并安装的品牌
所有品牌名称和商标归其各自所有者所有。除非另有明确说明，提及某品牌并不代表与其存在合作关系。产品均通过正规分销渠道采购。
常见问题
Is simulated phishing ethical?
Yes, when management approves it and it's used to teach, not to punish. We report by department and don't name and shame individuals.
Is one session enough?
No. The effect fades within months. Short monthly lessons plus regular simulations last longer than one long session a year.
Can you train staff in the provinces?
Yes. We come to the branch, or teach online for distant sites. Tell us how many people and which branches, and we'll send a plan and schedule.
相关指南
钓鱼攻击：写给每位员工及培训负责人的指南
识别诈骗邮件、WhatsApp 消息或电话的迹象，误点后该怎么办，以及如何开展员工不走神的三语培训。
密码策略与 MFA：别再强制每 90 天改密码
不少传统密码规则反而降低安全性。基于最新 NIST SP 800-63B 的密码策略、MFA 类型对比，以及适合信号差的外勤人员的推行顺序。
SPF、DKIM 和 DMARC：防止他人冒用您的域名发信
三条 DNS 记录告诉外界哪些邮件真正来自您。提供 Microsoft 365 和 Google Workspace 配置示例，以及逐步实现 p=reject 而不丢失发票邮件的路径。
如何诚实地在营销中使用 AI 生成的图片和视频
AI 图片和视频用得诚实就能助力营销：标注 AI 生成，不冒充真实产品、场所或效果；用真人面孔或声音作参考前先征得同意；核查素材版权，保留原图和提示词，发布前人工审核。
凌晨 2 点也能用的网络安全事件响应预案
基于 NIST SP 800-61 的 5–10 页预案结构、职责分工、邮箱被盗处置手册，以及如何用两小时完成演练。
防止企业 Facebook 主页被盗
老挝企业的 Facebook 主页如何因诈骗被盗，防范设置，以及最初一小时的应对措施。
相关解决方案
网络安全
下一代防火墙 (NGFW)可识别应用和用户的防火墙，具备 IPS、网页过滤、HTTPS 检测和 VPN，按全功能开启的实际性能选型。
安全远程访问 (VPN/ZTNA)员工和外包人员通过 VPN 或 ZTNA 加 MFA 随时随地访问内部系统，只能看到所需内容。
终端防护与 EDREDR 监控行为而不只依赖病毒库，可在勒索软件运行中途拦截，并立即将中毒电脑隔离出网络。
邮件安全通过过滤、SPF/DKIM/DMARC 和沙箱，拦截钓鱼邮件、冒充老板或供应商的诈骗邮件 (BEC) 及恶意附件。
零信任与网络准入控制 (NAC)借助 802.1X 和 NAC，在接入前验证每个用户和设备。插上网口不再等于能访问服务器。
SOC 与 SIEM 安全监控防火墙、服务器和终端日志汇入同一 SIEM，有专人盯告警，出事时有清晰的处置预案。发给我们建筑平面图或几张现场照片
我们会先询问一些细节，再给出初步设计方案。首次咨询免费，可用老挝语、泰语或英语，通过 WhatsApp 或 Facebook 主页联系。