Information technology has changed the world. It brings convenient lives to us but it also poses new challenges, including hacker attacks, blackmail and fraud. Malicious internet threats are also truly affecting people's lives, social order, and even sometimes threaten national security.
While cyberspace and related technologies are evolving, the issue of cyber security incidents has become more severe and serious. European countries and the United States have successfully and successively set up cybersecurity regulations and policies to encounter new cyber challenges; however, inadequacy and insufficiency of attention among Asian countries lead to serious and damaging cost to both public and private sectors.
Taiwan has a special political and economic status, facing serious cyber threats and real attacks. Therefore, Taiwanese government deployed a national strategy of “Cybersecurity is National Security,” which included a four-year strategy to elevate our cybersecurity capacities. In August 2016, a new integrated department of cybersecurity office, Department of Cybersecurity (DoCS), was built under the Executive branch. Their goals are:
(1) Establish a national cyber security mechanism;
(2) Cultivate different levels of cybersecurity talents to assure homeland security and digital economy;
(3) Develop key technologies and promote self-reliant research & development. So all cities in Taiwan could have an opportunity to move toward the smart city and to cultivate the capabilities to meet new challenges.
The organizational revolution not only limited in Executive branch, but also happened to form a “National Cybersecurity Iron Triangle Team.” DoCS, ICT Security of National Security Council (NSC) and National Communications Commission (NCC) are the main three pillars of this Iron Triangle Team. With regular meetings together, they jointly discuss and come up with best Taiwanese cybersecurity policies.
In order to turn strategy into action plans, DoCS would issue "5th phase of Cybersecurity Development Program” to execute solid cyber policies. This program would focus on three missions: critical information infrastructure protection (CIIP), information sharing and human capacity building.