【虹科案例】從60%到5%： Anglo-Eastern 如何用一年時間築起網路安全防線 - 虹科電子有限公司

Hongke's latest articles

HongKe

Add your title text here

I. Introduction: Strategic Changes at the Data Layer under the Critical Infrastructure Legislation

Hongke Case] From 60% to 5%: How Anglo-Eastern built network security defenses in one year

Employees are the weakest link, but they can also be the strongest line of defense.

In the shipping industry, about one-third of professionals suffer from cyber attacks every year. In the face of a huge crew scattered across the world's oceans, one of the biggest challenges for companies is how to raise the security awareness of all crew members.

Anglo-Eastern Ship Management (Anglo-Eastern Ship Management) used one year to deliver an eye-catching answer sheet: the percentage of staff vulnerable to phishing attacks dropped abruptly from 60% to 5%, the average daily initiative to report phishing emails amounted to as many as 200, and the training completion rate was as high as 90% or more.

i. the "safety dilemma" of ocean-going giants

Chung Ying Shipbuilding is a Hong Kong-based ship management company with a fleet of over 750 vessels and an annual cargo volume of 68 million tons. The company has 2,250 shore-based staff and over 32,000 seafarers, providing a full range of technical, crewing and ship leisure management services.

Such a large, globally dispersed workforce also represents a significant cybersecurity risk.

According to a study by assurance and risk management company DNV, the percentage of the shipping industry experiencing cyberattacks climbed 171 TP3T from 2019 to 2024, with 701 TP3T of respondents saying they are more worried about cyberattacks than ever before.

"We want to raise our employees' awareness of cybersecurity and help them master information protection," said Xerxes Kiok Kan, information security officer at Sino-British Ship Management. said Xerxes Kiok Kan, information security officer at Sino-British Ship Management.

However, the challenge is still in front of us: regular phishing attacks occur frequently in the face of a global workforce with diverse backgrounds. The company urgently needs to launch systematic and comprehensive cyber security training from the top to the bottom.

II. Finding a Solution: Three Requirements to be Met

Kiok Kan and the team quickly developed a cybersecurity awareness program and identified three core needs:

First, the course content must be comprehensive and relevant. From threat identification, data privacy, phishing email prevention to the incident reporting process, the more comprehensive the content, the better.

Second, the training format must be continuously updated and attractive. As the situation of cyber security is changing rapidly, the traditional model of "once trained, always benefited" does not work. The team hopes that the course can incorporate interactive quizzes and real-life case studies, so that security concepts can really penetrate into people's hearts.

Third, the platform must be flexible and adaptable. The shipping industry is in a race with attackers and needs a dynamic, professional platform to help organizations be ready to respond quickly to all types of security threats.

With these needs in mind, they started looking for a suitable platform.

Why KnowBe4?

Sino-British Ships evaluated a number of safety awareness products, focusing on their flexibility, content libraries and training modules. In the end, KnowBe4's HRM+ platform stood out due to its comprehensive advantages.

What really tipped the scales was the platform's phishing simulation feature - the system sends out simulated phishing emails to employees to test their defenses. The team can not only assess the overall defense level of the organization, but also pinpoint the focus of subsequent training based on the test data.

The team went on a three-month trial run. They were surprised by the results:Risk of phishing for test workers from about 50% to 60%The

This number is much higher than expected. But it was also the result that made them decide to officially partner with KnowBe4 to roll out safety training.

A Year of Change: From 60% to 5%

Since then, CBS has implemented a monthly safety training system for all staff. From the junior crew to the CEO, everyone receives a miniature training email from KnowBe4 on the first working day of each month. The training content combines KnowBe4's standardized material with BSV's own special cases.

Each training session takes less than six minutes. In just one year, the training completion rate reached 90% to 93%.

What's more, they started to use KnowBe4 to send out mock phishing emails on a regular basis to continuously test their employees' knowledge.

This initiative quickly paid off. At one point, the company was hit with a massive phishing email attack from the same source, and employees reported it through KnowBe4's Phishing Report Button (PAB) - nearly 200 reports in a single day.

"Before, employees would either click on the phishing email or forward it. Now, they use the report button to report it," Kiok Kan says with relief. Kiok Kan is pleased.

Today, the fishing susceptibility rate on C.I. vessels has dropped from 601 TP3T to just 51 TP3T, and those 51 TP3T are usually new hires who have not yet been trained.

V. When AI became the new threat, it only took them a month.

The survey revealed that more than 76% of shipping professionals believe their current cybersecurity training is insufficient to address complex threats.

But in the case of Chinese and British ships, the situation is very different.

"I remember a while ago, AI suddenly became a hot topic in the cybersecurity field. Within a month, KnowBe4 put up content on AI security risks, which helped us a lot. All I had to do was review the content, and then I could push it directly to my employees," Kiok Kan recalls. We don't have to spend a lot of time developing our own materials, and since most of us aren't in the content business, that's a huge value-add," Kiok Kan recalls.

The Safety Culture Behind Platinum Certification

As a result, China-Britain Shipbuilding has become one of the few companies in the industry to have been awarded the "China-Britain Shipbuilding Award".One of the "Cybersecurity Employee Awareness Program" Platinum Certified Ship Management CompaniesThe

"In the past, people didn't understand why we were doing this or why the company was setting up complicated password rules," says Kiok Kan. KnowBe4's training content has helped us create this awareness for our employees," says Kiok Kan.

"At the end of the day, the heart of security is building a strong foundation, which means that every employee is aware of security - they know the company's policies, and they know what to do in the event of an attack or a phishing email. That's the biggest value of this platform."

Looking ahead, they plan to continue to invest in cybersecurity training to build a virtually impenetrable defense against the shipping industry's increasingly sophisticated cyber threats.

"I'm proud to say that we chose KnowBe4," said Kiok Kan. "The entire shipping industry is still playing catch-up in the area of cybersecurity, and I'm confident that KnowBe4 will help whichever company we choose to build a strong culture of cybersecurity."

Data Security and Compliance

High-Performance Data and Automation

ADAS Simulation and Testing Framework

Signal Analysis and Sensing

In-Vehicle Network Communications

Industrial Internet of Things and Digital Factories

AI Machine Vision

Automation Control

Pharmaceutical Cold Chain and Environmental Monitoring

Laboratory Automation and Microfluidics

Environmental Monitoring and Facility Management

Critical Infrastructure Communications and Remote Collaboration

Professional Electronic Testing and Measurement

High-Performance Data and Automation

ADAS Simulation and Testing Framework

In-Vehicle Network Communications

Signal Analysis and Sensing

Industrial Internet of Things and Digital Factories

AI Machine Vision

Automation Control

Pharmaceutical Cold Chain and Environmental Monitoring

Laboratory Automation and Microfluidics

Environmental Monitoring and Facility Management

Critical Infrastructure Communications and Remote Collaboration

Hongke's latest articles

HongKe

Add your title text here

I. Introduction: Strategic Changes at the Data Layer under the Critical Infrastructure Legislation

Hongke Case] From 60% to 5%: How Anglo-Eastern built network security defenses in one year

i. the "safety dilemma" of ocean-going giants

II. Finding a Solution: Three Requirements to be Met

Why KnowBe4?

A Year of Change: From 60% to 5%

V. When AI became the new threat, it only took them a month.

The Safety Culture Behind Platinum Certification

Other Articles

[Hongke Solutions] A Comprehensive Guide to AR Applications in Hong Kong’s Healthcare Sector: 6 Key Scenarios and a Proof-of-Concept Guide

[Hongke Case Study] Siemens Energy Selects the ASPION G-Log 2 Shock Recorder

[Hongke Case Study] Using the Pico MT03A to Clear BMW Valvetronic Trouble Codes

Hot Products

About Us

Solutions

Other Information

Contact Us

Contact Hongke to help you solve your problems.

Let's have a chat