The National Cybersecurity Agency (NCSA) has written to permanent secretaries of 20 ministries, asking them to review about 24,000 legacy systems built around 2011, many with weak security and possibly unmaintained. Agencies are asked to move logins to multi-factor authentication instead of passwords alone, and to shut down unused services. NCSA said ThaiD alone is not recommended for MFA because it cannot handle heavy simultaneous use; apps like Google Authenticator or bank ID systems are suggested. For a Thai SME that deals with government portals, expect stricter login requirements, and check that any e-service accounts you use support MFA.