The National Communications Commission (NCC) has clarified that TWCERT/CC is an organization dedicated to exchanging information related to information security, both domestically and internationally, and has also become the information security incident reporting and handling window for the private sector. Through its efforts and by sharing information with domestic and international information security organizations, TWCERT/CC has implemented the said response services with view to strengthening the defense capacity of the nation. Since, nations worldwide are paying more attention to information security, issues, such as how to enhance information security measures and improve information security response mechanisms, particularly information security reporting and responding operations among countries, have become key concerns both domestically and abroad. Consequently, as the number of major information security incidents continues to increase, starting from 2019, TWNIC, which is a subordinate organization of NCC, will be responsible for relevant affairs, improving information sharing practices with both domestic and overseas information security organizations and enhancing the information security incident reporting and response capabilities of the private sector. TWCERT/CC, which was based on the sound and existing foundation established by National Chung-Shan Institute of Science and Technology (NCSIST), shall aim to coordinate closely with ministries and commissions. NCC also pointed out that, to further enhance the country’s connection and cooperation with international information security organizations, TWCERT/CC shall be the contact window therewith and, based on the division-of-labor framework of our country’s reporting and response system, shall serve private sector outside the scope of Cyber Security Management Act. It will be the main channel for the reporting and handling of information security incident.

　　For its planning and implementation of TWCERT/CC relevant affairs, TWNIC will first focus on compiling, organizing, analyzing and sharing information. The said core practices shall be further promoted to fortify the functions and role of TWCERT/CC as a protector of domestic information security system. Moreover, in order to assist the nation in developing the capacity of domestic information security industry, the incident response and handling principles of TWCERT/CC will be primarily based on matching services and recommendations. That is, professional information security suppliers, legal persons and academics shall be invited to assist in handling corporate information security incidents and in controlling the operations and handling capability of the country’s Computer Emergency and Response team (CERT).

　　NCC also explained that, for the short-term, TWCERT/CC will organize or jointly organize CERT/Computer Security Incident Response Team (CSIRT) alliance, public association and other activities to increase the positioning effectiveness of TWCERT/CC, help the private sector and industrial association to install CSIRT and enhance the information security incident reporting and response mechanism in order to establish private sector’s confidence towards TWCERT/CC and increasing volume of reporting. Furthermore, by cooperating with CERT, CSIRT, Product Security Incident Response Team (PSIRT), Security Operations Center (SOC) and information security operators, TWCERT/CC will be able to expand the source of security information and analyze technical capacities with view to increasing the validity of domestic and international security information sharing.

　　With respect to mid- and long-term targets, TWCERT/CC plans to fortify the functions of Malware Analysis Report System (MARS) and expand its scope to business. In this way, the leaking of commercially sensitive information and loss of business opportunities caused by malware will be minimized, helping companies to protect their information security in advance. In the meantime, in regard to international visibility, TWCERT/CC will strive for organizing a CERT annual event or technology related activities, raising visibility in the international information-security joint defense system community, increasing contacts with whom information can be exchanged, enhancing the information security defense system, and establishing a more trustworthy environment.

Free service hotline of Taiwan Computer Emergency Response Team/Coordination Center (TWCERT/CC): 0800-885-066.

Information security incident reporting hotline: 02-2341-4344; e-mail: twcert@cert.org.tw