探討政府部門資訊安全相關組織架構和人力資源發展策略- 日本與台灣的比較分析

Abstract

在全球快速數位化的浪潮中，日本於2021年9月成立了數位廳，而台灣則於2022年8月成立了數位發展部。日本和台灣積極參與數位化，都擁有政府機構、金融機構、能源供應系統和各種基礎設施等數位化的領域。對這些系統的攻擊可能對經濟和社會產生嚴重影響，因此提高了資訊安全的重要性。本論文關注兩國資訊安全的「組織架構」和「人才確保與培養」。筆者對從事資訊安全政策的官員和學者進行了訪談，以分享他們的專業知識和經驗。他們的見解和意見提供了無法從一般資訊來源獲得的寶貴信息。

第三章描述了對台灣專家的訪談結果，而第四章則聚焦於對日本專家的訪談。這些章奏深入探討了日本和台灣在組織架構和人力資源發展策略方面所採取的具體方法和實踐。第五章提供了日本和台灣之間的比較分析，檢視了資訊安全組織架構的四個要素，總結了台灣和日本的訪談概況，並討論了日本和台灣在追求有效資訊安全方面所面臨的任務和難題。基於整體發現，第六章提供了對日本政府的建議，包括加強資訊安全組織架構和人力資源發展工作的建議。

台灣的組織架構已經經歷了重大的變革，資通安全署需要透過試錯的方式來確立其角色。然而，在人才獲取和發展方面的計劃一直在穩步推進，領先於日本。另一方面，日本正試圖克服目前無法充分利用其組織架構優勢和展示領導力的現狀。為此，日本正在建立一個負責資訊安全的新的主要機構。在人才獲取和發展方面也有很大的進展空間，目前的情況仍然具有挑戰性。

In the midst of rapid digitalization worldwide, Japan established Digital Agency in September 2021, while Taiwan launched the Ministry of Digital Affairs (MODA) in August 2022. Japan and Taiwan, both of which are actively engaged in digitalization, have government organizations, financial institutions, energy supply systems, and various infrastructures that have been digitized. Attacks on these systems can have serious economic and societal implications, leading to an increased importance of cybersecurity. This paper focuses on the "organizational structure" and "talent development" of cybersecurity in both Japan and Taiwan. Interviews were conducted with politicians, practitioners, and researchers involved in cyber policies to share their expertise and experiences. Their insights and opinions provided valuable information that would not be obtainable through general sources.

Insights obtained from the interviews to Taiwanese experts are described in Chapter 3, while Chapter 4 focuses on those to Japanese experts. These chapters delve into the specific approaches and practices employed by Japan and Taiwan in their respective organizational structures and human resource development strategies. Chapter 5 presents a comparative analysis between Japan and Taiwan, examining the four components of cybersecurity organizational structure, providing an overview of the interviews of both Japan and Taiwan, and discussing the tasks and difficulties faced by Japan and Taiwan in their pursuit of effective cybersecurity. Based on the whole findings, Chapter 6 offers suggestions to the Japanese government, including recommendations for enhancing their cybersecurity organizational structure and human resource development efforts.

The organizational structure in Taiwan has undergone significant changes, and Administration for Cyber Security (ACS) needs to establish its role through trial and error. However, plans regarding talent acquisition and development have been steadily progressing, ahead of Japan. On the other hand, Japan is seeking to overcome the current situation where it cannot leverage the benefits of its organizational structure nor demonstrate leadership. In doing so, Japan is in the process of establishing a new primary organization responsible for cybersecurity. In terms of cybersecurity talent acquisition and development, there is still much progress to be made and the situation remains challenging.