Reprinted from the Federation of Hong Kong Industries’ publication ‘Hong Kong Industrialist’ (Nov 2023 – Jan 2024 issue), Original Article; For knowledge sharing purposes. For copyright issues, please contact us.
本文轉載自香港工業總會刊物《Hong Kong Industrialist》（Nov 2023 – Jan 2024刊期），原文；本轉載旨在分享知識與信息，如有侵權，請聯繫我們進行處理。
As technology continues to infiltrate every aspect of life and business, cyberattacks and extortion targeting the network systems of public organisations have become alarmingly frequent. This underscores the need for stakeholders to prioritise cybersecurity and strengthen defense capabilities. By raising awareness and implementing robust measures, we can effectively prevent data breaches and protect the interests of both enterprises and citizens.
近期公共機構的網絡系統遭到黑客入侵並勒索的情況屢見不鮮，隨著科技逐漸滲透在生活及商業上，不同的平台及裝置都可能成為網絡安全隱患。有見及此，社會各界都要提升對網絡安全的意識及防禦能力，防止資料外洩，以保障企業和市民大眾的利益。
Data: The new material revolutionising industrial development
數據已成新型工業發展材料
Our Government’s active promotion of Industry 4.0 has led to widespread adoption of innovative technologies in design, manufacturing, and operations to boost productivity and add value to the industry. However, it is crucial not to overlook the importance of cybersecurity in this industrial development. For instance, with the advent of 5G factories, high-speed, high-capacity, and low-latency capabilities empower real-time analysis and artificial intelligence through the Internet of Things (IoT), enabling industrial automation. This not only enhances efficiency, reduces costs, and improves product quality and safety but also fuels the rapid growth of digital-driven services like e-commerce platforms and smart logistics, reshaping sales strategies.
近年香港政府積極推動工業4.0，為令工業產生更多增加值，企業紛紛於設計、製造及營運上更廣泛地運用創新技術，務求優化生產力及產品設計，網絡安全對工業發展的重要性不容忽視。以5G智能工廠為例，其高速度、高容量及低時延令製造業可以利用物聯網配合實時分析和人工智能實現工業自動化。機器和工業設備在沒有人為干預的情況下運行，有助提高效率、降低成本並提高產品質量和安全性。除此之外，工業數字化亦令電子商貿平台、智慧物流等以數碼驅動的服務得以快速發展，改變行業的銷售模式。
The 2022 “Research Report on 5G Internet of Things Applications” published by FHKI reveals that more than half of the companies surveyed are actively utilising IoT applications, such as remote management, advanced predictive maintenance, and supply chain asset management and tracking. Additionally, these companies expressed their plans to further invest in such technologies, indicating a growing trend of 5G IoT adoption within the industry.
根據工總於2022年發表的《5G物聯網應用研究報告》指出，有超過一半受訪企業擁有物聯網項目，例如遠程管理、高級預測性維護和供應鏈資產管理及跟蹤，亦有一半的受訪企業指出會在未來增加相關投資，可見5G物聯網在工業的發展愈來愈廣泛。
Enhancing cybersecurity to safeguard corporate interests
提升網絡安全 保障企業利益
As innovation and technology open up new possibilities for industries, they also bring along a range of security threats due to the use of software supporting extensive network functions and connected devices. The manufacturing industry, for instance, faces substantial damage if machinery operations come to a halt. With the integration of information technology (IT) into operational technology systems under new industrialisation, industrial enterprises are exposed to significant cybersecurity risks. Recent data from IBM’s report highlights that the manufacturing industry has been the most targeted sector for cyberattacks over the past two years. It is imperative for the industry to prioritise cybersecurity measures effectively in order to counteract hackers and safeguard operations.
創新技術為工業帶來更多的可能性，但使用支持更多網絡功能的軟件及更多的連接設備同時亦帶來了更多的安全威脅，由於機器停止運作會對製造業構成極大損失，把工業營運技術系統連接至資訊科技的新型工業化發展就令工業企業充滿網絡安全危機。根據IBM今年的報告指出，製造業連續兩年為遭受勒索攻擊最多的行業，業界要做好網絡安全的保障，防止被黑客入侵。
Enterprises can implement various measures to prevent data breaches effectively. Firstly, it is essential to enhance employees’ cybersecurity awareness. Enterprises should establish clear corporate IT policies and guidelines that outline the principles that employees and relevant stakeholders must follow. Additionally, providing training to educate employees about the significance of information security and how to prevent data breach risks at an early stage is crucial. Secondly, regular assessment and reinforcement of network protection measures are necessary. Enterprises should conduct periodic checks of their IT systems and electronic devices, identifying areas that require improvement. This may involve implementing multi-factor authentication tools for different applications and utilising anti malware software and firewalls for electronic devices. Thirdly, effective database management and contingency plans should be established. Enterprises should regularly backup systems that contain essential data and promptly dispose of or anonymise unnecessary or expired personal data. In the event of a data security incident, prompt and efficient remedial measures must be taken to minimise the risk of data leakage.
企業可以透過以下措施預防資料外洩。第一，提高員工網絡安全意識。企業宜訂立企業資訊科技及守則，以明確指出員工及相關持分者應恪守的原則，同時可為員工提供培訓，以教育員工資訊保安的重要性，以及早預防資料外洩的危機。第二，定時評估及加強網絡防護。企業應定期檢查在公司內各處的資訊系統以及電子設備，以確認需要改善的地方，例如為不同應用程式安裝多重身份驗證工具及為電子設備安裝反惡意軟件及防火牆等。第三，管理資料庫及訂立應變方案。備份含有必要資料的系統，並適時地銷毀或匿名化不必要或過期的個人資料，當不幸發生資料保安事故時，亦要採取及時和有效的補救措施，減低資料外洩的風險。
Our Government can play a crucial role in helping enterprises enhance their cybersecurity awareness through various initiatives. One such initiative is optimising the application scope of Technology Voucher Programme (TVP) to provide assistance to enterprises, especially SMEs, in improving their IT systems. This would enable enterprises to allocate more resources towards strengthening their system protection capabilities. At the same time, our Government should cultivate digital literacy among citizens. For instance, by conducting briefing sessions and intensifying promotion on preventing cybersecurity incidents, citizens and employees can be made aware and take conscious efforts to safeguard network security.
政府亦可以不同途徑協助企業提升網絡安全意識，包括優化「科技券」的應用範圍，以協助企業尤其是中小企改善資訊及網絡系統，以令企業有更多資源投放於提升系統防護能力。同時，政府亦應培育市民的數碼素養，例如舉辦資訊講座及加強對防範網絡安全事故的宣傳，以令市民及企業員工有意識保障網絡安全。