建立我國通資訊基礎建設安全機制計畫推動現況與展望

Current Status and Prospect for Promoting the "National Information and Communication Infrastructure Security Mechanism Plan"

林逢慶(Ferng-Ching Lin)

《研考雙月刊》 29卷1期 (2005/02) Pp. 35-45

https://doi.org/10.6978/YKSYK.200502.0035

摘要

本文旨在介紹我國資通訊基礎建設發展現況，及其未來展望。2001年1月行政院核定「建立我國通資訊基礎建設安全機制計劃」為我國政府推動資通訊安全計劃之濫觴。於此同時「國家資通安全會報」的成立，在整合有關部會資源，積極推動我國資通安全基礎建設上，扮演了相當重要的角色。
綱路的普及以及高度e化的影響，突顯了資通安全的重要性。因此，各國政府莫不高度重視，並積極推動資通安全相關建設，諸如專責主管機關的設立、認推動與人才培訓、促進國際合作以及扶植産業發展等。
2005年開始的第二期資通安全機制計劃，目前規劃的政策方向，主要有「建立國家資通安全事件通報及危機應變體系」、「強化國家資通安全認知與推廣資安教育訓練」、「標凖規範與認驗證服務」、以及「促進國際合作工同打擊網路犯罪」等四項，期望藉由資通訊安全作業的落實，「確保我國擁有安全、可信賴的資訊通訊環境」。

關鍵字

資通安全 ； 國家資通安全會報 ； 資安防護管理中心 ； 網路釣魚 ； BS7799

並列摘要

This paper is intended to introduce the current status of critical information and communication (I&C) infrastructure development of Taiwan and its future prospects. The ”National Information and Communication Infrastructure Security Mechanism Plan” approved by the Executive Yuan in January 2001 marks the beginning of the national I&C security plan. Moreover, in integrating the resources from different related departments and associations, the National Information and Communication Security Taskforce (NICST) has played a major role in launching the national I&C security infrastructure.
Nowadays, the popularization of the Internet and the effects of excessive electronic applications specially mark the importance of I&C security. Hence, different governments place strong emphasis on it and also play an active role in launching I&C security infrastructure, such as the establishment of responsible competent authorities, I&C security awareness promotion and personnel training, promotion of international cooperation, and assistance to industrial development, etc.
The current policy directions for the Second I&C Security Action Plan started in 2005 comprise the following four major goals: ”establishment of the national I&C security crisis and incident reporting and alarm mechanism & risk management system”, ”consolidation of national I&C security awareness and the promotion of information security educational training”, ”standardization and certification services”, and ”promotion of international cooperation to attack cyber crimes,” with the hope to ”ensure that Taiwan has a safe and reliable I&C environment,” through the implementation of I&C security operations.

並列關鍵字

Information and communication security I&C security ； National Information and Communication Security Taskforce NICST ； Security Operation Center SOC ； Phishing ； BS7799