OptimaTech Limited

OptimaTech Limited With 20+ years of expertise, we protect and advance your digital success.

We empower organizations with innovative, security-driven tech and solutions, including data, network, and cloud security, plus collaboration tools and expert IT services.

𝗦𝘁𝗼𝗽 𝗦𝗲𝗻𝘀𝗶𝘁𝗶𝘃𝗲 𝗗𝗮𝘁𝗮 𝗟𝗲𝗮𝘃𝗶𝗻𝗴 𝗯𝘆 𝗠𝗶𝘀𝘁𝗮𝗸𝗲, 𝗪𝗶𝘁𝗵𝗼𝘂𝘁 𝗦𝘁𝗼𝗽𝗽𝗶𝗻𝗴 𝗪𝗼𝗿𝗸Data doesn't only leak through attacks. It also leaks throu...
29/10/2026

𝗦𝘁𝗼𝗽 𝗦𝗲𝗻𝘀𝗶𝘁𝗶𝘃𝗲 𝗗𝗮𝘁𝗮 𝗟𝗲𝗮𝘃𝗶𝗻𝗴 𝗯𝘆 𝗠𝗶𝘀𝘁𝗮𝗸𝗲, 𝗪𝗶𝘁𝗵𝗼𝘂𝘁 𝗦𝘁𝗼𝗽𝗽𝗶𝗻𝗴 𝗪𝗼𝗿𝗸

Data doesn't only leak through attacks. It also leaks through everyday actions: a customer spreadsheet emailed to the wrong person, a contract uploaded to a personal cloud drive, card numbers pasted into a chat.

Microsoft Purview Data Loss Prevention (DLP) helps prevent people from sharing sensitive data with those who shouldn't have it. Policies find sensitive information such as credit card numbers, health records and financial data using deep content analysis, not a simple text scan, and can also use yesterday's sensitivity labels.

Where DLP policies can apply:

📧 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝟯𝟲𝟱: Exchange email, SharePoint, OneDrive, and Teams chats and channels. 💻 𝗗𝗲𝘃𝗶𝗰𝗲𝘀: Windows 10, Windows 11 and the three most recent versions of macOS. 🗄️ 𝗕𝗲𝘆𝗼𝗻𝗱 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝟯𝟲𝟱: on-premises file shares and SharePoint, Power BI and other cloud apps. 🤖 𝗔𝗜: Microsoft 365 Copilot and Copilot Chat (preview), plus inline protection for tools such as ChatGPT and Gemini through Edge for Business or network options.

The response can match the risk: a policy tip that warns the user, a block the user can override with a written reason, or a full block. DLP activity is recorded in the audit log by default.

Microsoft's own advice is worth following: plan your policies, deploy them in simulation mode and check the impact before switching on blocking. That way protection doesn't stop legitimate work. Check which locations your licences cover.

That wraps up our Microsoft 365 week: Defender, Intune, SharePoint, sensitivity labels and DLP. Which one will you check first?

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

---------------

防止敏感資料意外外洩，同時不妨礙日常工作

數據外洩不一定來自攻擊，也可能源於日常操作：把客戶資料試算表寄錯人、把合約上載到個人雲端儲存空間，或把信用卡號碼貼到聊天訊息中。

Microsoft Purview 資料外洩防護（DLP）協助防止用戶把敏感資料分享給不應取得的人。政策以深入內容分析（而非簡單文字掃描）找出信用卡號碼、健康紀錄及財務數據等敏感資料，亦可配合昨天介紹的敏感度標籤。

DLP 政策可應用於：

📧 Microsoft 365：Exchange 電郵、SharePoint、OneDrive，以及 Teams 聊天及頻道訊息。 💻 裝置：Windows 10、Windows 11 及最近三個版本的 macOS。 🗄️ Microsoft 365 以外：內部檔案共用及內部 SharePoint、Power BI 及其他雲端應用程式。 🤖 AI：Microsoft 365 Copilot 及 Copilot Chat（預覽版），並可透過 Edge for Business 或網絡選項，為 ChatGPT、Gemini 等工具提供即時保護。

回應可按風險調整：以政策提示警告用戶；封鎖但容許用戶寫下理由後繼續；或完全封鎖。DLP 活動預設記錄於審核記錄中。

Microsoft 本身的建議值得參考：先規劃政策，以模擬模式（simulation mode）部署並評估影響，然後才啟用封鎖。這樣既可保護資料，亦不會妨礙正常工作。請確認貴機構授權涵蓋哪些位置。

本星期的 Microsoft 365 系列至此完結：Defender、Intune、SharePoint、敏感度標籤及 DLP。你會先檢查哪一項？

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

#網絡安全 #防止資料外洩 #資料保安

𝗟𝗮𝗯𝗲𝗹 𝗬𝗼𝘂𝗿 𝗗𝗮𝘁𝗮 𝗢𝗻𝗰𝗲. 𝗧𝗵𝗲 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝗧𝗿𝗮𝘃𝗲𝗹𝘀 𝗪𝗶𝘁𝗵 𝘁𝗵𝗲 𝗙𝗶𝗹𝗲.Yesterday we looked at who can open files in SharePoint. But ...
28/10/2026

𝗟𝗮𝗯𝗲𝗹 𝗬𝗼𝘂𝗿 𝗗𝗮𝘁𝗮 𝗢𝗻𝗰𝗲. 𝗧𝗵𝗲 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝗧𝗿𝗮𝘃𝗲𝗹𝘀 𝗪𝗶𝘁𝗵 𝘁𝗵𝗲 𝗙𝗶𝗹𝗲.

Yesterday we looked at who can open files in SharePoint. But files don't stay put. They are downloaded, emailed, copied to USB drives and forwarded outside the organisation. Once a file leaves the site, the site's permissions no longer protect it.

Microsoft Purview Information Protection uses sensitivity labels to classify and protect data without getting in the way of everyday work and collaboration. The key point, in Microsoft's words: because the label is stored in metadata for files and emails, "the label stays with the content, no matter where you save or store it."

What labels can do:

🏷️ 𝗖𝗹𝗮𝘀𝘀𝗶𝗳𝘆: categories that fit your business, for example Public, General, Confidential and Highly Confidential. 🔐 𝗘𝗻𝗰𝗿𝘆𝗽𝘁: control who can open emails, meeting invites and documents, and what they can do with them. 💧 𝗠𝗮𝗿𝗸: add watermarks, headers or footers in Office apps, so everyone can see a document is sensitive. 🤖 𝗔𝗽𝗽𝗹𝘆 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗰𝗮𝗹𝗹𝘆: detect sensitive information and apply a label, or recommend one to the user with a policy tip. 🗂️ 𝗣𝗿𝗼𝘁𝗲𝗰𝘁 𝗰𝗼𝗻𝘁𝗮𝗶𝗻𝗲𝗿𝘀: label Teams, Microsoft 365 Groups and SharePoint sites to control access to where content is stored.

Microsoft 365 Business Premium includes sensitivity labels for email, files and Teams meetings.

Our advice: start small. Four or five labels that staff understand work better than a long list nobody uses. Ask which three types of document would hurt most if they leaked. Those are your first labels.

Tomorrow: how Purview DLP uses these labels to stop sensitive data leaving.

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

-------------------

為數據加上標籤，保護隨檔案同行

昨天我們探討了誰可以開啟 SharePoint 內的檔案。但檔案不會停留在原處：它們會被下載、以電郵傳送、複製到 USB 手指，再轉寄給機構以外的人。檔案一旦離開網站，網站的權限設定便不能再保護它。

Microsoft Purview Information Protection 以敏感度標籤（sensitivity labels）為數據分類及加以保護，同時不妨礙日常工作及協作。重點在於：標籤儲存在檔案及電郵的元數據內，正如 Microsoft 所說，「無論內容儲存在哪裏，標籤都會跟隨內容」。

標籤可以做到：

🏷️ 分類：按業務需要設定類別，例如 Public、General、Confidential 及 Highly Confidential。 🔐 加密：控制誰可開啟電郵、會議邀請及文件，以及可進行哪些操作。 💧 標示：在 Office 應用程式中加上水印、頁首或頁尾，讓每個人一看便知文件屬敏感資料。 🤖 自動套用：偵測敏感資料後自動套用標籤，或以政策提示建議用戶套用。 🗂️ 保護容器：為 Teams、Microsoft 365 群組及 SharePoint 網站加上標籤，管控存放內容地方的存取權限。

Microsoft 365 Business Premium 已包括電郵、檔案及 Teams 會議的敏感度標籤。

我們的建議：由小處開始。四至五個員工容易明白的標籤，比一長串無人使用的標籤更有效。先問一問：哪三類文件一旦外洩影響最大？它們就是第一批要加標籤的文件。

明天：Purview DLP 如何利用這些標籤，阻止敏感資料外流。

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

#網絡安全 #資料保安 #資料分類

𝗦𝗵𝗮𝗿𝗲𝗱 𝗪𝗶𝘁𝗵 𝗘𝘃𝗲𝗿𝘆𝗼𝗻𝗲 𝗯𝘆 𝗠𝗶𝘀𝘁𝗮𝗸𝗲? 𝗖𝗵𝗲𝗰𝗸 𝗦𝗵𝗮𝗿𝗲𝗣𝗼𝗶𝗻𝘁 𝗕𝗲𝗳𝗼𝗿𝗲 𝗔𝗜 𝗗𝗼𝗲𝘀.Most organisations now keep their files in SharePoint, ...
27/10/2026

𝗦𝗵𝗮𝗿𝗲𝗱 𝗪𝗶𝘁𝗵 𝗘𝘃𝗲𝗿𝘆𝗼𝗻𝗲 𝗯𝘆 𝗠𝗶𝘀𝘁𝗮𝗸𝗲? 𝗖𝗵𝗲𝗰𝗸 𝗦𝗵𝗮𝗿𝗲𝗣𝗼𝗶𝗻𝘁 𝗕𝗲𝗳𝗼𝗿𝗲 𝗔𝗜 𝗗𝗼𝗲𝘀.

Most organisations now keep their files in SharePoint, OneDrive and Teams. Over time, sharing piles up: "Anyone" links sent to a supplier years ago, sites opened to the whole company for one project, guests who never left.

This matters more as AI assistants arrive. Microsoft's documentation explains that Copilot and agents retrieve data from Microsoft Graph and respect existing permissions, sharing settings and policies. So if a file is overshared, Copilot can bring it up for anyone who already has access. Microsoft also notes: "By default, SharePoint sets sharing settings to the most permissive option."

Settings worth reviewing:

🔗 𝗦𝗵𝗮𝗿𝗶𝗻𝗴 𝗹𝗲𝘃𝗲𝗹: Anyone, new and existing guests, existing guests only, or only people in your organisation. Each site can match the organisation setting or be stricter. ⏳ 𝗔𝗻𝘆𝗼𝗻𝗲 𝗹𝗶𝗻𝗸𝘀: make them expire after a set number of days, or allow view-only. 👥 𝗪𝗵𝗼 𝘆𝗼𝘂 𝘀𝗵𝗮𝗿𝗲 𝘄𝗶𝘁𝗵: allow or block specific domains, and let guest access expire automatically. 📊 𝗙𝗶𝗻𝗱 𝗼𝘃𝗲𝗿𝘀𝗵𝗮𝗿𝗶𝗻𝗴: data access governance reports show the sites with the broadest access, recent sharing links and content shared with "Everyone except external users". Site owners can be asked to review access. 🙈 𝗞𝗲𝗲𝗽 𝘀𝗲𝗻𝘀𝗶𝘁𝗶𝘃𝗲 𝘀𝗶𝘁𝗲𝘀 𝗼𝘂𝘁 𝗼𝗳 𝗔𝗜 𝗮𝗻𝘀𝘄𝗲𝗿𝘀: Restricted Content Discovery removes a site from organisation-wide search and Copilot without changing its permissions.

Some of these tools are part of SharePoint Advanced Management, so check what your licences include.

This week, open your SharePoint sharing settings and check what the default is. It may be wider than you expect.

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

----------------

檔案誤設為人人可見？趁 AI 找到之前先檢查 SharePoint

大部分機構的檔案現已存放在 SharePoint、OneDrive 及 Teams。日子久了，分享設定不斷累積：多年前發給供應商的「任何人」連結、為某個項目而開放給全公司的網站，以及一直未有移除的訪客。

隨着 AI 助理普及，這個問題更值得關注。Microsoft 的文件說明，Copilot 及 AI 代理透過 Microsoft Graph 擷取數據，並遵從現有的權限、分享設定及政策。換言之，檔案一旦過度分享，任何已有存取權的人都可透過 Copilot 找到它。Microsoft 亦指出：「SharePoint 的分享設定預設為最寬鬆的選項。」

值得檢視的設定：

🔗 分享級別：任何人、新舊訪客、只限現有訪客，或只限機構內人員。每個網站的設定可與機構設定相同或更嚴格。 ⏳「任何人」連結：設定在指定日數後到期，或只容許檢視。 👥 分享對象：按網域容許或封鎖分享，並設定訪客存取自動到期。 📊 找出過度分享：數據存取管治報告顯示存取範圍最廣的網站、近期建立的分享連結，以及分享給「Everyone except external users」的內容；亦可邀請網站擁有人檢討存取權限。 🙈 敏感網站不出現在 AI 回應中：Restricted Content Discovery 可在不更改權限的情況下，把網站從全機構搜尋及 Copilot 中移除。

部分工具屬於 SharePoint Advanced Management，請先確認貴機構的授權包括哪些功能。

本星期，不妨打開 SharePoint 分享設定，看看預設值是甚麼，範圍可能比你預期更廣。

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

#網絡安全 #資料保安 #資料管治

𝗦𝘁𝗮𝗳𝗳 𝗨𝘀𝗲 𝗧𝗵𝗲𝗶𝗿 𝗢𝘄𝗻 𝗣𝗵𝗼𝗻𝗲𝘀 𝗳𝗼𝗿 𝗪𝗼𝗿𝗸. 𝗪𝗵𝗲𝗿𝗲 𝗗𝗼𝗲𝘀 𝗖𝗼𝗺𝗽𝗮𝗻𝘆 𝗗𝗮𝘁𝗮 𝗚𝗼?Yesterday we looked at Microsoft Defender on company dev...
26/10/2026

𝗦𝘁𝗮𝗳𝗳 𝗨𝘀𝗲 𝗧𝗵𝗲𝗶𝗿 𝗢𝘄𝗻 𝗣𝗵𝗼𝗻𝗲𝘀 𝗳𝗼𝗿 𝗪𝗼𝗿𝗸. 𝗪𝗵𝗲𝗿𝗲 𝗗𝗼𝗲𝘀 𝗖𝗼𝗺𝗽𝗮𝗻𝘆 𝗗𝗮𝘁𝗮 𝗚𝗼?

Yesterday we looked at Microsoft Defender on company devices. Today, the devices you don't fully control: personal phones, home laptops and contractors' tablets that still open work email and files.

Unmanaged devices are a common way in. Microsoft's Digital Defense Report 2024 found that in more than 90% of ransomware attacks that reached the ransom stage, attackers used unmanaged devices as the initial access point or for remote encryption.

Microsoft Intune helps protect organisational data on both managed and unmanaged devices:

📱 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝘄𝗶𝘁𝗵𝗼𝘂𝘁 𝗲𝗻𝗿𝗼𝗹𝗺𝗲𝗻𝘁: app protection policies keep company data inside managed apps, even on personal phones that are not enrolled. ✂️ 𝗡𝗼 𝗰𝗼𝗽𝘆-𝗮𝗻𝗱-𝘀𝗮𝘃𝗲 𝗹𝗲𝗮𝗸𝘀: restrict cut, copy and paste, and stop company data being saved to personal storage or moved to personal accounts. ✅ 𝗛𝗲𝗮𝗹𝘁𝗵𝘆 𝗱𝗲𝘃𝗶𝗰𝗲𝘀 𝗼𝗻𝗹𝘆: compliance policies check OS version, encryption and threat level. With Microsoft Entra Conditional Access, non-compliant devices can be blocked. 🔐 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗰𝗼𝗺𝗽𝗮𝗻𝘆 𝗱𝗲𝘃𝗶𝗰𝗲𝘀: BitLocker on Windows, FileVault on macOS. 🧹 𝗖𝗼𝗺𝗽𝗮𝗻𝘆 𝗱𝗮𝘁𝗮 𝗼𝘂𝘁, 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗱𝗮𝘁𝗮 𝗸𝗲𝗽𝘁: "Retire" removes organisational data and keeps personal data; selective wipe removes company data from apps.

Intune also works with Microsoft Defender for Endpoint: Defender's device risk scores feed into compliance policies and Conditional Access, so access can follow the level of risk.

A simple check for this week: list every device that opens company email or files. If one were lost tomorrow, could you remove the company data from it?

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

----------------

員工用私人手機處理工作，公司數據流向哪裏？

昨天我們介紹了公司裝置上的 Microsoft Defender。今天談談機構未能完全掌控的裝置：仍會開啟工作電郵及檔案的私人手機、家用電腦，以及合約員工的平板電腦。

未受管理的裝置是常見的入侵途徑。Microsoft《2024 年數碼防禦報告》（Digital Defense Report 2024）指出，在發展至勒索階段的勒索軟件攻擊中，超過 90% 以未受管理的裝置作為最初入侵點，或用作遙距加密。

Microsoft Intune 協助在受管理及未受管理的裝置上保護機構數據：

📱 毋須登記也能保護：應用程式保護政策把公司數據留在受管理的應用程式內，即使是未登記的私人手機亦適用。 ✂️ 堵塞複製及儲存漏洞：限制剪下、複製及貼上，並防止公司數據被儲存至個人儲存空間或轉移至個人帳戶。 ✅ 只容許健康的裝置：合規政策檢查操作系統版本、加密狀態及威脅級別；配合 Microsoft Entra 條件式存取，可封鎖不合規的裝置。 🔐 公司裝置加密：Windows 使用 BitLocker，macOS 使用 FileVault。 🧹 移除公司數據，保留個人資料：「停用」（Retire）會移除機構數據並保留個人資料；選擇性清除則可從應用程式中移除公司數據。

Intune 亦與 Microsoft Defender for Endpoint 整合：Defender 的裝置風險評分會用於合規政策及條件式存取，讓存取權限按風險水平調整。

本星期不妨做個簡單檢查：列出所有會開啟公司電郵或檔案的裝置。如果明天其中一部遺失，可以從中移除公司數據嗎？

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

#網絡安全 #資料保安 #流動裝置管理

𝗨𝘀𝗲 𝗖𝗮𝘀𝗲: 𝗪𝗵𝗲𝗻 𝘁𝗵𝗲 𝗙𝗶𝗿𝗲 𝗔𝗹𝗮𝗿𝗺 𝗚𝗼𝗲𝘀 𝗢𝗳𝗳, 𝗪𝗵𝗼 𝗛𝗲𝗮𝗿𝘀 𝗜𝘁 𝗙𝗶𝗿𝘀𝘁?In a busy building, the first minutes of an incident matter m...
22/10/2026

𝗨𝘀𝗲 𝗖𝗮𝘀𝗲: 𝗪𝗵𝗲𝗻 𝘁𝗵𝗲 𝗙𝗶𝗿𝗲 𝗔𝗹𝗮𝗿𝗺 𝗚𝗼𝗲𝘀 𝗢𝗳𝗳, 𝗪𝗵𝗼 𝗛𝗲𝗮𝗿𝘀 𝗜𝘁 𝗙𝗶𝗿𝘀𝘁?

In a busy building, the first minutes of an incident matter most. Yet in many sites the alarm panel, the two-way radios and the duty phones are three separate systems. Someone has to notice the alert, pick up a radio and hope the right person is listening.

A Deltapath customer story describes a large shopping mall with 100 staff monitoring operations. The mall joined up its building management system and its frontline communications with Deltapath Push-to-Talk:

🚨 𝗔𝗹𝗮𝗿𝗺𝘀 𝗴𝗼 𝘀𝘁𝗿𝗮𝗶𝗴𝗵𝘁 𝘁𝗼 𝗽𝗲𝗼𝗽𝗹𝗲: fire, safety, equipment and burglary sensors trigger alerts to staff phones, with alert details and a siren that matches the alarm type. ✅ 𝗣𝗿𝗼𝗼𝗳 𝗼𝗳 𝗿𝗲𝘀𝗽𝗼𝗻𝘀𝗲: the system tracks whether each person acknowledged the alert, and when. 📻 𝗥𝗮𝗱𝗶𝗼𝘀 𝘄𝗶𝘁𝗵𝗼𝘂𝘁 𝘁𝗵𝗲 𝗿𝗮𝗻𝗴𝗲 𝗹𝗶𝗺𝗶𝘁𝘀: one-push group and one-to-one calls over mobile networks and Wi-Fi, with Bluetooth for hands-free use. 🔒 𝗔 𝗿𝗲𝗰𝗼𝗿𝗱 𝘆𝗼𝘂 𝗰𝗮𝗻 𝗿𝗲𝗹𝘆 𝗼𝗻: conversations are encrypted and can be recorded for compliance.

As Deltapath's CEO put it: "A shopping mall demands rapid response to incidents." The same applies to hotels, hospitals, campuses, warehouses and security teams in New Zealand and Hong Kong.

That wraps up our Deltapath week: Cisco migration, calling from Teams, a hospital, an airline contact centre and now a mall's frontline team.

Still relying on radios and pagers when an alarm goes off? Let's talk about joining them up.

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

---------------

應用實例：火警鐘響起，誰會最先知道？

在人流密集的建築物內，事故發生後的頭幾分鐘最為關鍵。然而不少場所的警報系統、對講機及當值電話各自獨立運作：要有人先留意到警報，再拿起對講機，並期望合適的同事正在收聽。

Deltapath 的一個客戶故事，講述一個大型購物商場由 100 名員工負責監察日常運作。商場把樓宇管理系統與前線通訊整合，採用 Deltapath Push-to-Talk：

🚨 警報直達相關人員：火警、安全、設備及防盜感應器觸發的警報，會直接傳送至員工手機，附有警報詳情，並按警報類型發出不同警示聲。 ✅ 回應有據可查：系統記錄每位員工是否已確認收到警報，以及確認時間。 📻 對講機不再受距離限制：透過流動網絡及 Wi-Fi 一按即可進行群組或一對一通話，並支援藍牙免提。 🔒 可靠紀錄：通話經加密，並可錄音以符合合規要求。

正如 Deltapath 行政總裁所說：「購物商場必須對事故迅速作出回應。」紐西蘭及香港的酒店、醫院、校園、倉庫及保安團隊同樣如此。

本星期的 Deltapath 系列至此完結：Cisco 系統遷移、在 Teams 內撥打電話、醫院、航空公司客戶服務中心，以及今天的商場前線團隊。

警報響起時，仍然依賴對講機及傳呼機？歡迎與我們聯絡，商討如何把它們整合起來。

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

#統一通訊 #一按即通 #前線團隊 #網絡安全

𝗨𝘀𝗲 𝗖𝗮𝘀𝗲: 𝗔𝗻 𝗔𝗶𝗿𝗹𝗶𝗻𝗲 𝗖𝗼𝗻𝘁𝗮𝗰𝘁 𝗖𝗲𝗻𝘁𝗿𝗲 𝗧𝗵𝗮𝘁 𝗖𝗼𝘂𝗹𝗱𝗻'𝘁 𝗖𝗼𝘂𝗻𝘁 𝗜𝘁𝘀 𝗖𝗮𝗹𝗹𝘀When customers call about a flight, every dropped call ...
21/10/2026

𝗨𝘀𝗲 𝗖𝗮𝘀𝗲: 𝗔𝗻 𝗔𝗶𝗿𝗹𝗶𝗻𝗲 𝗖𝗼𝗻𝘁𝗮𝗰𝘁 𝗖𝗲𝗻𝘁𝗿𝗲 𝗧𝗵𝗮𝘁 𝗖𝗼𝘂𝗹𝗱𝗻'𝘁 𝗖𝗼𝘂𝗻𝘁 𝗜𝘁𝘀 𝗖𝗮𝗹𝗹𝘀

When customers call about a flight, every dropped call is a complaint waiting to happen. A Deltapath case study describes a Kuala Lumpur-based airline that reached that point.

Its contact centre ran on a basic phone system. After an office move, calls started dropping. Supervisors had no real monitoring or reporting, and the system "could not track the number of incoming calls". Without that number, staffing and service targets were guesswork.

The airline moved its contact centre to Deltapath:

💬 𝗢𝗻𝗲 𝗽𝗹𝗮𝗰𝗲 𝗳𝗼𝗿 𝗲𝘃𝗲𝗿𝘆 𝗰𝗵𝗮𝗻𝗻𝗲𝗹: voice, email, messaging and web chat, with a link that lets an agent move a chat customer onto a call. 🤖 𝗦𝗲𝗹𝗳-𝘀𝗲𝗿𝘃𝗶𝗰𝗲 𝗳𝗶𝗿𝘀𝘁: IVR handles routine tasks, so agents spend time on the calls that need a person. 🖥️ 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗵𝗶𝘀𝘁𝗼𝗿𝘆 𝗼𝗻 𝘀𝗰𝗿𝗲𝗲𝗻: Deltapath Talk for Salesforce shows the account when a call arrives, and agents can click to call. 📊 𝗥𝗲𝗮𝗹-𝘁𝗶𝗺𝗲 𝗿𝗲𝗽𝗼𝗿𝘁𝘀: performance data for coaching, staffing and decisions.

In the airline's words: "There is now a single centralized platform to take calls." The reports are now also used by other teams, including crew and pilot management, and the airline runs Deltapath in ten countries.

For Hong Kong service teams, the same contact centre can add WhatsApp and WeChat as channels. For insurers, utilities and service desks in New Zealand, the first win is often simply knowing how many calls you miss.

Do you know how many callers gave up waiting last week? Let's find out together.

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

------------------

應用實例：連來電數字都無法統計的航空公司客戶服務中心

客戶來電查詢航班時，每一通斷線的電話都可能變成投訴。Deltapath 的一個個案研究，講述一間以吉隆坡為基地的航空公司正面對這個情況。

該公司的客戶服務中心原本使用基本的電話系統。遷址後，來電開始出現斷線；主管缺乏實時監察及報告功能，系統甚至「無法統計來電數目」。沒有這個數字，人手安排及服務目標都只能靠估計。

航空公司把客戶服務中心轉用 Deltapath：

💬 所有渠道集中處理：語音、電郵、即時訊息及網上聊天，客服人員更可發送連結，把聊天中的客戶轉為通話。 🤖 先自助、後轉接：以 IVR 處理例行查詢，讓客服人員專注處理需要真人協助的來電。 🖥️ 來電即見客戶紀錄：Deltapath Talk for Salesforce 在來電時顯示客戶帳戶資料，並支援一按撥號。 📊 實時報告：為培訓、人手安排及決策提供表現數據。

該航空公司表示：「現在我們有一個集中的平台接聽來電。」這些報告現時亦由機組人員及機師管理等其他團隊使用，而該公司已在十個國家使用 Deltapath。

對香港的客戶服務團隊而言，同一客戶服務中心亦可加入 WhatsApp 及 WeChat 渠道。對紐西蘭的保險公司、公用事業機構及服務台而言，第一步往往只是清楚知道錯失了多少來電。

貴機構上星期有多少位來電者因等候太久而放棄？歡迎與我們聯絡，一起找出答案。

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

#統一通訊 #客戶服務中心 #客戶體驗 #網絡安全

𝗨𝘀𝗲 𝗖𝗮𝘀𝗲: 𝗪𝗵𝗲𝗻 𝗮 𝗛𝗼𝘀𝗽𝗶𝘁𝗮𝗹'𝘀 𝗣𝗵𝗼𝗻𝗲 𝗦𝘆𝘀𝘁𝗲𝗺 𝗟𝗼𝘀𝘁 𝗜𝘁𝘀 𝗦𝘂𝗽𝗽𝗼𝗿𝘁For a hospital, the phone line is part of patient care. When it...
20/10/2026

𝗨𝘀𝗲 𝗖𝗮𝘀𝗲: 𝗪𝗵𝗲𝗻 𝗮 𝗛𝗼𝘀𝗽𝗶𝘁𝗮𝗹'𝘀 𝗣𝗵𝗼𝗻𝗲 𝗦𝘆𝘀𝘁𝗲𝗺 𝗟𝗼𝘀𝘁 𝗜𝘁𝘀 𝗦𝘂𝗽𝗽𝗼𝗿𝘁

For a hospital, the phone line is part of patient care. When it fails, people can't reach a ward, book an appointment or get advice.

A hospital in the Philippines, with two sites serving almost a million people, faced exactly that (UC Today case study, January 2024). Its phone system was ageing and less reliable, and the original provider had gone out of business, so there was no maintenance. Call volumes were high, but nobody could see wait times. Callers sat on hold or gave up, and receptionists could not always put them through to the right extension.

The hospital moved to Deltapath, integrated with the infrastructure it already had:

📋 𝗖𝗮𝗹𝗹𝘀 𝗮𝗻𝘀𝘄𝗲𝗿𝗲𝗱 𝗮𝗻𝗱 𝗾𝘂𝗲𝘂𝗲𝗱: IVR answers straight away, tells callers their place in the queue and lets them choose a department or extension. 🔗 𝗘𝘅𝗶𝘀𝘁𝗶𝗻𝗴 𝗱𝗲𝘃𝗶𝗰𝗲𝘀 𝗸𝗲𝗽𝘁 𝘄𝗼𝗿𝗸𝗶𝗻𝗴: Avaya, Polycom and Yealink endpoints run alongside IP phones, softphones, email, IM and Microsoft Teams. 🩺 𝗖𝗮𝗿𝗲 𝗮𝘁 𝗮 𝗱𝗶𝘀𝘁𝗮𝗻𝗰𝗲: telemedicine video consultations make care easier to reach for patients on outlying islands. 📊 𝗡𝘂𝗺𝗯𝗲𝗿𝘀 𝗳𝗼𝗿 𝗺𝗮𝗻𝗮𝗴𝗲𝗿𝘀: how many calls are answered and how many are abandoned.

The lesson goes beyond healthcare. A phone system with no vendor behind it is a service risk, and it also stops receiving security fixes. Hospitals, aged-care providers and clinics in New Zealand and Hong Kong rely on voice every hour of the day.

When was your phone system last updated, and who supports it today? Let's check.

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

-----------------

應用實例：當醫院的電話系統失去支援

對醫院而言，電話線路是病人護理的一部分。電話一旦失靈，病人便無法聯絡病房、預約或查詢。

菲律賓一間醫院正面對這個情況（UC Today 個案研究，2024 年 1 月）。這間醫院設有兩個院址，服務近一百萬人。其電話系統日漸老化、可靠性下降，原供應商更已結業，系統無人維護。來電量高，卻無法掌握等候時間；來電者長時間等候或索性掛線，接待員亦未必能把來電轉接至正確分機。

醫院轉用 Deltapath，並與現有基礎設施整合：

📋 即時接聽及排隊：IVR 即時接聽，告知來電者輪候位置，並讓他們選擇部門或分機。 🔗 沿用現有裝置：Avaya、Polycom 及 Yealink 終端，與 IP 電話、軟電話、電郵、即時訊息及 Microsoft Teams 一同運作。 🩺 遙距醫療：遙距視像診症，讓離島病人更容易獲得護理。 📊 管理數據：清楚顯示有多少來電獲接聽、有多少被放棄。

這個啟示不限於醫療界。沒有供應商支援的電話系統，不但影響服務，亦不再獲得保安修補。紐西蘭及香港的醫院、安老服務機構及診所，每時每刻都依賴語音通訊。

貴機構的電話系統上一次更新是甚麼時候？現時由誰支援？歡迎與我們聯絡，一起檢查。

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

#統一通訊 #醫療科技 #遙距醫療 #網絡安全

𝗢𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝟯𝟲𝟱 𝗘𝟭 𝗼𝗿 𝗘𝟯? 𝗬𝗼𝘂𝗿 𝗦𝘁𝗮𝗳𝗳 𝗖𝗮𝗻 𝗠𝗮𝗸𝗲 𝗣𝗵𝗼𝗻𝗲 𝗖𝗮𝗹𝗹𝘀 𝗙𝗿𝗼𝗺 𝗧𝗲𝗮𝗺𝘀Teams is where most people now chat and meet. But f...
19/10/2026

𝗢𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝟯𝟲𝟱 𝗘𝟭 𝗼𝗿 𝗘𝟯? 𝗬𝗼𝘂𝗿 𝗦𝘁𝗮𝗳𝗳 𝗖𝗮𝗻 𝗠𝗮𝗸𝗲 𝗣𝗵𝗼𝗻𝗲 𝗖𝗮𝗹𝗹𝘀 𝗙𝗿𝗼𝗺 𝗧𝗲𝗮𝗺𝘀

Teams is where most people now chat and meet. But for many organisations on Microsoft 365 E1 or E3, calling a customer's phone number still means switching to a desk phone, a mobile or another app. Two places to work, two call histories, and more ways to miss a call.

Deltapath Talk for Microsoft Teams adds phone calling to Teams for E1 and E3 users:

📞 𝗖𝗮𝗹𝗹 𝗮𝗻𝘆 𝗻𝘂𝗺𝗯𝗲𝗿: make and receive calls on the public telephone network (PSTN) without leaving Teams. 🗂️ 𝗘𝘃𝗲𝗿𝘆𝗱𝗮𝘆 𝗰𝗮𝗹𝗹 𝘁𝗼𝗼𝗹𝘀: voicemail, call history and call transfers. 👥 𝗠𝗲𝗲𝘁 𝘁𝗵𝗲 𝘄𝗮𝘆 𝘆𝗼𝘂 𝘄𝗼𝗿𝗸: audio conference calls, plus video meetings. 🎙️ 𝗥𝗲𝗰𝗼𝗿𝗱𝗶𝗻𝗴 𝘄𝗵𝗲𝗻 𝘆𝗼𝘂 𝗻𝗲𝗲𝗱 𝗶𝘁: call recording to help meet compliance requirements. 📱 𝗕𝗲𝘆𝗼𝗻𝗱 𝘁𝗵𝗲 𝗹𝗮𝗽𝘁𝗼𝗽: Deltapath Mobile on smartphones and Deltapath Engage on desktops.

Behind Teams, the same Deltapath platform can also run desk phones, a contact centre and push-to-talk, so voice stays in one system as your needs grow.

Deltapath reports more than 2,000 enterprise customers in 94 countries (Deltapath corporate overview), and OptimaTech brings it to organisations in New Zealand and Hong Kong.

How do your Teams users call customers today? Let's look at your licences and find the simplest route.

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

-------------

使用 Microsoft 365 E1 或 E3？員工可直接在 Teams 內撥打電話

Teams 已成為大部分人日常溝通及開會的地方。但對不少使用 Microsoft 365 E1 或 E3 的機構而言，要致電客戶，仍需轉用桌面電話、手機或另一個應用程式。工作分散在兩處，通話紀錄亦分開兩邊，錯過來電的機會亦更多。

Deltapath Talk for Microsoft Teams 為 E1 及 E3 用戶在 Teams 內加入電話功能：

📞 撥打任何號碼：毋須離開 Teams，即可透過公共電話網絡（PSTN）撥出及接聽電話。 🗂️ 日常通話功能：留言信箱、通話紀錄及轉駁來電。 👥 配合工作模式：音訊電話會議，以及視像會議。 🎙️ 有需要時錄音：通話錄音，協助符合合規要求。 📱 不限於手提電腦：智能手機可用 Deltapath Mobile，桌面電腦可用 Deltapath Engage。

在 Teams 背後，同一個 Deltapath 平台亦可支援桌面電話、客戶服務中心及一按即通（Push-to-Talk），隨着需要增加，語音通訊仍集中在同一系統。

Deltapath 表示其企業客戶超過 2,000 家，遍及 94 個國家（Deltapath 企業簡介），OptimaTech 則為紐西蘭及香港機構引入這套方案。

貴機構的 Teams 用戶現時如何致電客戶？歡迎與我們聯絡，一起檢視授權並找出最簡便的方法。

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

#統一通訊 #混合辦公 #網絡電話 #網絡安全

𝗦𝘁𝗶𝗹𝗹 𝗥𝘂𝗻𝗻𝗶𝗻𝗴 𝗖𝗶𝘀𝗰𝗼 𝗖𝗨𝗖𝗠? 𝗬𝗼𝘂 𝗗𝗼𝗻'𝘁 𝗛𝗮𝘃𝗲 𝘁𝗼 𝗧𝗵𝗿𝗼𝘄 𝗢𝘂𝘁 𝘁𝗵𝗲 𝗣𝗵𝗼𝗻𝗲𝘀This week we look at Deltapath, the unified communicatio...
18/10/2026

𝗦𝘁𝗶𝗹𝗹 𝗥𝘂𝗻𝗻𝗶𝗻𝗴 𝗖𝗶𝘀𝗰𝗼 𝗖𝗨𝗖𝗠? 𝗬𝗼𝘂 𝗗𝗼𝗻'𝘁 𝗛𝗮𝘃𝗲 𝘁𝗼 𝗧𝗵𝗿𝗼𝘄 𝗢𝘂𝘁 𝘁𝗵𝗲 𝗣𝗵𝗼𝗻𝗲𝘀

This week we look at Deltapath, the unified communications platform OptimaTech brings to organisations in New Zealand and Hong Kong. We start with a question many IT teams with Cisco phone systems are facing.

Cisco has stopped selling perpetual licences for Cisco Unified Communications Manager (CUCM). Its end-of-life notice lists 31 January 2024 as the last date of support, with the Collaboration Flex Plan subscription as the migration path. For many organisations, that means a new subscription and possibly new servers and handsets, even when today's phones still work well.

Deltapath offers another route:

☎️ 𝗞𝗲𝗲𝗽 𝘆𝗼𝘂𝗿 𝗖𝗶𝘀𝗰𝗼 𝗽𝗵𝗼𝗻𝗲𝘀: the Deltapath UC Platform supports Cisco models from CUCM 14, 12.0x and 11.5x, including end-of-sale and end-of-support models. 🔀 𝗠𝗶𝘅 𝗯𝗿𝗮𝗻𝗱𝘀: Avaya, Poly, Yealink and other endpoints can run on the same system, so you buy only what you need. 🧭 𝗠𝗼𝘃𝗲 𝗶𝗻 𝗽𝗵𝗮𝘀𝗲𝘀: a built-in session border controller and gateways connect to your existing PBX during migration, and you keep your phone numbers. ☁️ 𝗖𝗵𝗼𝗼𝘀𝗲 𝘄𝗵𝗲𝗿𝗲 𝗶𝘁 𝗿𝘂𝗻𝘀: your own servers, VMware, Hyper-V or KVM, AWS or Azure, or as a cloud subscription. 📱 𝗔𝗱𝗱 𝗺𝗼𝗯𝗶𝗹𝗶𝘁𝘆: Deltapath Mobile and the Engage softphone come with the UC Platform, so staff can take their desk extension anywhere.

When is your next phone system renewal? Before you sign, let's check which of your handsets can stay.

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

--------------------

仍在使用 Cisco CUCM？毋須棄用現有電話

本星期我們介紹 Deltapath，OptimaTech 為紐西蘭及香港機構引入的統一通訊平台。第一天，先談談不少使用 Cisco 電話系統的 IT 團隊正面對的問題。

Cisco 已停止銷售 Cisco Unified Communications Manager（CUCM）的永久授權。根據其產品終止公告，最後支援日期為 2024 年 1 月 31 日，建議的遷移方案為 Collaboration Flex Plan 訂閱。對不少機構而言，這意味着要轉用訂閱制，甚至可能需要更換伺服器及電話機，即使現有電話仍運作良好。

Deltapath 提供另一個選擇：

☎️ 保留 Cisco 電話：Deltapath UC Platform 支援 CUCM 14、12.0x 及 11.5x 的 Cisco 型號，包括已停售及已停止支援的型號。 🔀 不同品牌並存：Avaya、Poly、Yealink 等終端可在同一系統運作，按需要採購即可。 🧭 分階段遷移：內置會話邊界控制器（SBC）及閘道，遷移期間可連接現有 PBX，並保留原有電話號碼。 ☁️ 自選部署方式：自家伺服器、VMware、Hyper-V 或 KVM、AWS 或 Azure，或以雲端訂閱形式使用。 📱 加強流動辦公：UC Platform 已包括 Deltapath Mobile 及 Engage 軟電話，員工可隨時隨地使用辦公室分機。

貴機構的電話系統何時續約？簽約前，歡迎與我們聯絡，先檢查哪些電話機可以繼續使用。

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

#統一通訊 #企業電話系統 #網絡電話 #網絡安全

𝗧𝗵𝗲 𝗔𝗰𝗰𝗼𝘂𝗻𝘁𝘀 𝗪𝗶𝘁𝗵 𝘁𝗵𝗲 𝗠𝗼𝘀𝘁 𝗣𝗼𝘄𝗲𝗿 𝗗𝗲𝘀𝗲𝗿𝘃𝗲 𝘁𝗵𝗲 𝗖𝗹𝗼𝘀𝗲𝘀𝘁 𝗪𝗮𝘁𝗰𝗵Domain admins, root accounts, database administrators, service...
15/10/2026

𝗧𝗵𝗲 𝗔𝗰𝗰𝗼𝘂𝗻𝘁𝘀 𝗪𝗶𝘁𝗵 𝘁𝗵𝗲 𝗠𝗼𝘀𝘁 𝗣𝗼𝘄𝗲𝗿 𝗗𝗲𝘀𝗲𝗿𝘃𝗲 𝘁𝗵𝗲 𝗖𝗹𝗼𝘀𝗲𝘀𝘁 𝗪𝗮𝘁𝗰𝗵

Domain admins, root accounts, database administrators, service accounts, and passwords hard-coded into scripts. These are the accounts attackers want most once they are inside, because they open everything else.

In many organisations they are also the least controlled: shared admin passwords, local admin rights on every laptop, and service accounts that nobody remembers creating.

IBM Verify Privilege, powered by Delinea, covers the main privileged risks:

🔐 𝗣𝗿𝗶𝘃𝗶𝗹𝗲𝗴𝗲 𝗩𝗮𝘂𝗹𝘁: password vaulting, auditing and privileged access control (formerly IBM Secret Server). 💻 𝗣𝗿𝗶𝘃𝗶𝗹𝗲𝗴𝗲 𝗠𝗮𝗻𝗮𝗴𝗲𝗿: remove local admin rights and use application control to block malware-based risks on endpoints. 🧰 𝗗𝗲𝘃𝗢𝗽𝘀 𝗩𝗮𝘂𝗹𝘁: centralised secrets management, so credentials come out of code and pipelines. 🗂️ 𝗔𝗰𝗰𝗼𝘂𝗻𝘁 𝗟𝗶𝗳𝗲𝗰𝘆𝗰𝗹𝗲 𝗠𝗮𝗻𝗮𝗴𝗲𝗿: control how service accounts are created, managed and retired, to stop account sprawl.

For on-premises estates, Server Suite governs privileged access through Active Directory.

ISO/IEC 27001:2022 (Annex A 8.2) treats privileged access rights as a control of its own. From IBM's case studies: a logistics company in Brazil using IBM Verify improved access response time by 99%, from five days to seconds.

That wraps up our identity week: customers, workforce, identity protection, governance and privileged access. As an IBM Silver Partner, OptimaTech can help you decide where to start.

Do you know how many privileged and service accounts you have today? A discovery exercise is a good first step. Talk to us.

📩 Talk to us: [email protected] 🌐 https://optimatech.co.nz

-------------------

權限最大的帳戶，最需要嚴密看管

網域管理員、root 帳戶、數據庫管理員、服務帳戶，以及寫死在程式腳本內的密碼。攻擊者一旦入侵，最想取得的就是這些帳戶，因為它們能打開所有其他系統。

在不少機構，這些帳戶反而最缺乏管控：管理員密碼多人共用、每部手提電腦都有本機管理員權限，還有無人記得何時開設的服務帳戶。

IBM Verify Privilege（由 Delinea 提供技術）涵蓋主要的特權帳戶風險：

🔐 Privilege Vault：密碼保管庫、審核及特權存取管控（前稱 IBM Secret Server）。 💻 Privilege Manager：移除本機管理員權限，並以應用程式管控阻截惡意軟件帶來的風險。 🧰 DevOps Vault：集中管理機密資料（secrets），把登入資料從程式碼及開發流程中移除。 🗂️ Account Lifecycle Manager：管控服務帳戶的開設、管理及停用，避免帳戶無序增長。

對於內部部署環境，Server Suite 可透過 Active Directory 管治特權存取。

ISO/IEC 27001:2022（附件 A 8.2）把特權存取權限列為獨立的控制項目。IBM 個案研究顯示：一間巴西物流公司採用 IBM Verify 後，存取回應時間改善 99%，由五日縮短至數秒。

本星期的身份保安系列至此完結：客戶、員工、身份保護、身份管治及特權存取。OptimaTech 作為 IBM Silver Partner，可協助貴機構決定從哪裏開始。

貴機構現時有多少個特權及服務帳戶？先進行一次盤點，是很好的第一步。歡迎與我們聯絡。

📩 立即聯絡我們：[email protected] 🌐 https://optimatech.com.hk

Hashtags #網絡安全 #身份保安 #特權帳戶 #零信任

Address

H/43 Apollo Drive, Rosedale
Auckland
0632

Opening Hours

Monday 9am - 5pm
Tuesday 9am - 5pm
Wednesday 9am - 5pm
Thursday 9am - 5pm
Friday 9am - 5pm

Website

,

Alerts

Be the first to know and let us send you an email when OptimaTech Limited posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share

Category

Other Information Technology Companies in Auckland

Show All