Enhancing Smart Governance and Cybersecurity Protection

■ Other core targets involved

Stakeholders involved: Park Enterprises, Neighboring Communities(Non-govern mental Organizations and the Public), Government Agencies

1. Smart Sustainability and Cyber Security Joint Defense

Driven by increasing rainfall variability in recent years, Taiwan has repeatedly faced water shortage crises. The CTSP Bureau designated "changes in average rainfall and water resource stress" as a material climate change risk in 2021, and has since driven various water resource contingency plans. To enhance risk identification, early warning, and emergency response capabilities across the parks, the Bureau introduced Information and Communication Technology (ICT) to update park pipeline mapping data into the Geographic Information System (GIS) database, strengthening pipeline management and smart decision-making. Concurrently, seismic sensors and message transmission equipment have been installed throughout the parks alongside the setup of an integrated seismic message communication group. This ensures that seismic intensity and acceleration data can be transmitted in real time, significantly boosting disaster notification and response efficiency.

While continuously expanding its digital systems, the Bureau is simultaneously strengthening its cybersecurity governance and joint defense mechanisms. The Bureau has already passed information security and privacy management certifications such as ISO 27001 and ISO 27701, and completed its transition audit to the ISO 27001:2022 standard in 2025. Furthermore, in compliance with the Cyber Security Management Act, the Bureau has implemented comprehensive measures including security testing, cybersecurity health checks, threat detection, vulnerability notifications, endpoint detection and response (EDR), and Government Configuration Baselines (GCB), while continuously upgrading hardware and software to fortify overall cyber defenses. Over the past three years, the Bureau has experienced no major data breach incidents and continues to align with the Executive Yuan's directives to advance cybersecurity management operations. Additionally, the co-location data center for the National Science and Technology Council (NSTC) and the three major science parks—Hsinchu (HSP), Central Taiwan (CTSP), and Southern Taiwan (STSP)—is established at CTSP. Managed by a dedicated operations and maintenance team in strict adherence to security regulations, it delivers stable and secure information services to all three parks. Concurrently, through the Science Park Information Sharing and Analysis Center (SP-ISAC), the Bureau drives the sharing of cyber threat intelligence, security technologies, and information exchanges to provide early warnings to park enterprises. From 2024 to 2025, the center hosted 24 training courses and seminars, drawing 1,873 attendees from the IT and cybersecurity staff of park enterprises, consistently reinforcing the joint cybersecurity defense capabilities across the three science parks.

Smart Sustainable Development Plan for Science Parks
Science Park Information Sharing and Analysis Center