Page 75 - 2023年中科VDR報告書_英文版

Vision : Sustainable Park

Central Taiwan Science
Park Disaster Emergency
Response Center

2. Joint protection of information security
Through intelligent systems, we improve the resilience of the park, including intelligent
disaster prevention and water information systems, earthquake early warning systems,

and real-time updating of water information and earthquake information to reduce
the losses in potential risk shocks. On the other hand ,with the continuous innovation
of network technique and technology, the introduction of digital information system

can break the time and space constraints and help organizations improve their
operational efficiency. With the increasing risk of information security, CTSP Bureau, as a
government agency, passed the information security verification of ISO 27001:2013 many

years ago, and added the privacy information management system of ISO 27701 :2019 in
2022. In addition, we regularly implement security measures such as security inspection,

security and health inspection, security threat detection and management mechanism
of Infocomm, government configuration benchmark, security weakness notification
mechanism of Infocomm, internal information security and social engineering education

and training according to the matters to be done in Infocomm Security Management
Law, and continue to update software and hardware equipment to implement relevant

information security protection. In the last three years, there has been no leakage of
important information in this bureau. We also continue to cooperate with the Executive
Yuan to promote various information and communication security management

operations, and the co-construction computer room of NSTC and its three parks (HSP,
CTSP and STSP) is also built in CTSP, which is under the responsibility of the project
maintenance team, and the information security control measures are also implemented

as required, hoping to provide perfect and safe information services for the three parks.

The Science Park Information Sharing and Analysis Center (SP-ISAC) is planned and
promoted by NSTC and belongs to HSP, CTSP and STSP. Through:

(1) Early warning: research and analysis of sharing information and international
information and security technology from time to time.

(2) Strengthen the internal security management and protection energy in the park:
provide technical training, personnel training, seminars and meetings, and assist
security drills.

73