两分钟视频解说脚本

Narration Script: Onboarding Information Security Process (Two Minutes)

Welcome. This briefing outlines the essential information security steps you must complete during onboarding. Follow these actions to protect company systems and data.

Accounts and access:

• Activate your corporate accounts as instructed.
• Create a strong, unique passphrase of at least 12 characters. Do not reuse passwords from other services.
• Enroll multi-factor authentication on email, VPN, and all business applications.
• Use the approved password manager. Never share credentials.

Device setup:

• Work only on company-managed devices.
• Verify endpoint protection and automatic updates are active.
• Enable full-disk encryption and set screen auto-lock to five minutes or less.
• Install software only from the approved catalog. Do not use unknown USB devices.
• When offsite or on public Wi‑Fi, connect through the corporate VPN.

Data handling:

• Review the data classification policy during your first week. Treat customer, financial, and personal data as confidential by default.
• Store files only on approved drives and collaboration tools. Do not use personal email or personal cloud storage for company data.
• Share data with the minimum necessary recipients. Use secure transfer methods for sensitive information.

Email and phishing:

• Inspect sender addresses and links before clicking. Be cautious with unexpected attachments or requests for urgency.
• Do not provide passwords or MFA codes via email or chat.
• Report suspicious messages using the “Report Phish” option or the security contact.

Physical security:

• Secure your badge and lock your workstation when unattended.
• Keep sensitive documents out of view and follow clear desk practices.

Incident reporting:

• Report suspected data loss, malware, misdirected emails, or policy violations immediately via the designated channel.
• If malware is suspected, disconnect from networks and do not power off unless instructed.

Compliance and support:

• Complete the mandatory security awareness training and policy acknowledgments within your first week.
• For help, contact the Security Team at [security contact] or visit [intranet link].

Thank you for keeping our environment secure. Security is part of every role, starting today.