Partner Stakeholders

International Organization Stakeholders

The stakeholder survey has involved 4 respondents from international organizations -- one from ICANN, one from APNIC, and two from a foreign CERT agency, one from the management level and one point of contact. Although the tasks and operations of these 3 organizations differ from those of TWCERT/CC, considering they have offered their suggestions from the same angle as an international organization and shared how their practices can be applied in Taiwan, the 4 interviews are put in the same stakeholder category as international organizations.

Current Organization Status and Partnership

Stakeholders from international organizations have shown their satisfaction with the excellent interactions and partnership with TWNIC and TWCERT/CC. They also appreciate the efforts TWNIC and TWCERT/CC made and contributed to the international communities. They view TWNIC as a strong partner in promoting security policies and technologies. Under the CEO's proactive leadership, TWNIC is able to build a solid foundation for technologies and interactions, to successfully improve network stability and cyber safety.

The thing that they're part of those are working group activities and we really appreciate those contribution from TWCERT in terms of those working group activities and things like that so I would expect there I look forward to their continuous contribution to those working groups and APCERT activities.

I think TWNIC has always been one of the leaders in helping to establish better practices, new services and technologies and so forth so this despite a little bit quite a lot of technical development going on at the moment.

Stakeholders also highly recognized how the events were held without being hindered by COVID-19. TWNIC has proactively encouraged collaboration and participation as well as maintaining communications with home and overseas partners. The event communication went very well. Holding hybrid events during COVID-19 has also greatly impressed the international partners.

That event was actually the first sort of a hybrid event that we actually manage to have with fellow collaborators, so it was kind of like a bit of a milestone for us because I think before that all the other events, we were able to do that they were either smaller scale or they would just be online. So that forum actually in April was the first one that we actually really did something that's like a full on like forum and it's in a hybrid mode.

Recommendation on Key Development Fields

As to collaboration progress, stakeholders from international organizations suggest to continue put in more efforts and share resources/experiences from Taiwan with the international communities in addition to intensifying collaboration by maintaining current efforts in technologies and providing training support/registration operation. In fact, it is wise to increase exposure by making good use of the mass media and reach a larger audience with content in different forms. For example, it is nice to create a video summary after the event so that people who don't have time to participate can also learn about the key takeaways.

So that sort of like, exposure to the community, not only to the technical community but also to the wider general users... exposure is one of the approaches to, but there is no quick solution to this question. So you have to work on it for a long time, I think it takes a while for people to actually get an understanding of organization and like getting trust so it's not an easy solution.

So we had to do the events, but if you want to engage your wider audience, then we have to work in building in content that is in bite sizes through today's audience's attention span, because people would follow you for one hour they will just do it for like maybe 10 minutes they will jump on, but only the things that are relevant for them.

Using different languages for cross-country communication is the bridge and foundation for creating more interaction opportunities with the international communities.

I didn't recall many publications are made in English so I think in terms of reaching out to more wider audience or partners, I guess, pumping up more about English publication of forms or like advisories. I think they're doing quite good technical capability as well so I guess that's that part might be one of the, you know, One of the ways to actually increase their engagement, more audience.

Future Positioning and Expectations of the Organization

While being highly recognized for pushing forward the connections with organizations home and aboard as well as nurturing local communities, stakeholders encourage and expect TWNIC to make progress on international relations, facilitate active local communities and promote the connections between online communities from Taiwan and abroad.

I think we're also like quite grateful that TWNIC that they have a lot of good ideas to try and facilitate that sort of the interaction with the people who are in Taiwan.

They can encourage industries in Taiwan or younger generation in school to involve in internet governance and management. After all, they have closer connections with local communities. I think it's a better direction to work on by building further ties with local communities and bringing the experience to APNIC.

Stakeholders also pointed out TWNIC's unique and favorable role as the bridge between the public and private sectors. With the advantage of operating TWCERT/CC, the suggestion is to assist/give advice to other countries in setting up CERT so as to scale up the international community by exporting the tech know-hows, demonstrate Taiwan's tech capacities to impress and build trust with international partners, and enhance its influence on the international stage for opportunities to gain more discursive power.

CERTs come in a lot of different flavors and knowing, and from the excessively governmental and bureaucratic national security oriented to something much more practical and hands on. My understanding of TWCERT that had some gifts in the middle but towards the practical end, I think the way of TWNIC has always been a very pragmatic and practical hands on sort of approach and that also that also potentially gives a role in providing services elsewhere and we has been helping with the establishment of certs in small Pacific Island places where a CERT is literally a couple of people employed to do that and they've got a huge job because they are looking after relations with government, police and NGOs, sort of non government sector in business and everything. So, that possibly that potentially is a role for TWNIC and one where we could certainly have a collaboration so that that the ability to create the necessary human relationships and to extend the circles of trust, which are really important in the surf community through that and build it on a technology transfer sort of relationship is quite huge.

Government Agencies

With solid and complete foundation, the expectation is to proactively increase brand awareness and value

Stakeholders think TWNIC and TWCERT/CC have a solid foundation in brand positioning and serve as an important role to assist the government with excellent performance. This year stakeholders look forward to more extraordinary and flourishing progress on top of TWCERT/CC's existing services.

│ TWCERT/CC's achievements have met the government's expectation for them. We also look forward to more proactive and productive results and the government will do its best in facilitating their achievement. Once the overall framework is in place, the key is to work on the depth and the width.

Stakeholders also gave positive recognition to TWCERT/CC's efforts in coordination/handling incident reporting, info sharing and security literacy education while looking forward to increasing brand awareness, reaching out to more people/companies/industries, promoting relevant services and campaigns and thus bringing its influences to full play.

Specific courses of action include transforming the negative COVID-19 impact into fuels boosting marketing effects such as the remote working security section made available on the official website that consolidates handy information for users. It's also advantageous to leverage the popularity of social media to reach a larger audience, scale up marketing campaigns to attract more attention, build brand awareness as well as establishing the brand value.

COVID-19 appears to be an excellent opportunity for TWCERT/CC to gradually impress everyone by sharing tips about working from home and video conferencing.

The established security information section and created content are positive efforts made to nurture the security awareness of enterprises and their capacities to handle security incidents. This kind of know-hows and insights need more promotion and publicity. It's necessary to collaborate with more organizations to exert greater influence.

Follow closely on international security and network development trends, deploy security standards/specification

Stakeholders suggest TWCERT/CC to follow international security trends and the latest development of internet applications so that they can identify opportunities to provide services and discover new requirements and clients. As TWCERT/CC is well equipped with solid tech strength and interacts closely with industries and government agencies, it can play a significant role in coordinating the development of each new technology associated with cyber-security.

If we pay close attention to international security trends, we can learn about the development of these new emerging applications/services. Besides, the majority of these new applications/services are not the government agencies specified in Cyber Security Management Act. Therefore they are all clients of TWCERT/CC.

As technologies advance, such as 5G, AIoT, online platforms being used as an extension of intellectual property, all kinds of innovative applications/services are derived thereof. No matter how new and creative the applications are, they will certainly need security protection for continuous development. And this is what TWCERT/CC excels at.

Continue to review work results, integrate horizontally, build a solid foundation, and initiate cross-field collaboration

Stakeholders view TWCERT/CC as a bridge connecting the public and private sectors and thus expect it to create closer and more diverse interactions among the industry, government and academia. By visiting all the services currently in operation, TWCERT/CC should be able to understand its clientele and expand the value of services. Through different cross-field collaboration models, TWCERT/CC can consolidate security agencies/companies of the same nature horizontally, build a solid foundation by promoting people's security literacy, incorporate enterprise security requirements, academic research results and survey information shared by government agencies. By leveraging the strength of different parties, the vision is to build a thorough security protection network as formidable as a fortress.

TWCERT/CC can work internally in the enterprises and offer their help in coordinating/handling incidents. This is my idea that TWCERT/CC can play different roles from info sharing, info provision to acting as a consultant. It requires thorough consideration to decide whether to work with security businesses, to let security businesses work on their own or to seek help from TWCERT/CC.

After all, TWCERT/CC has limited resources and manpower. Therefore it's important to put emphasis on cross-field collaboration and leverage the strength of the industry, government, academia and research groups. In the future, TWCERT/CC can work with ICT associations on organizing incident reporting and response seminars, security info sharing conferences and run TWCERT/CC social media sites for promotion and publicity so as to build reciprocal trust.

Copyright© Taiwan Network Information Center