"People" is one of the three key elements for effective operation of information security, closely linked with "Processes" and "Technology" aspects, but is often the weakest link. How to enhance employees' information security awareness has always been a critical issue. This presentation will explore how to cultivate good information security habits and behaviors, further strengthening the personal and corporate information security defense capabilities.