Hong Weixi, professor of the Department of Asset Management at National Chengchi University and chairman of the Information Application Development Association of the Republic of China. (Photo by reporter Tian Yuhua)
Liberty Times held a forum on "New Opportunities and Resilience of the Food Delivery Industry" today (29th). Hong Weixi, a professor at the Department of Asset Management at National Chengchi University and chairman of the Information Application Development Association of the Republic of China, pointed out that the digital economy brings opportunities but also comes with information security costs. It is impossible to pursue zero information security risks. The focus is on establishing a reasonable and flexible governance environment. When there is no precedent for system development to follow, it is recommended to establish a "test base" under the protection of regulations.
Talking about how to make digital innovation and trustworthy information security governance go hand in hand, Hong Weixi pointed out that the opportunities brought by the platform economy will also come with costs. From the perspective of information security governance, if the delivery platform has a large amount of information, there is a risk of disclosure, but the key to information security control lies in security control and management. In terms of cost-benefit balance, it is unnecessary and unreasonable to spend huge sums of money to strictly protect trivial information. Furthermore, there is no absolutely safe information security, and it is impossible to be completely risk-free. If you want to achieve the ultimate high level of protection, it is a fool's errand, or even impossible.
Hong Weixi said that since the application of innovative technologies in the platform economy is an unstoppable trend, it is unlikely that they will not be used due to information security issues. Therefore, the first step should be to establish clear governance standards as an important foundation for the development of the digital economy. The difference between governance and management is that management is more focused on information security protection technology tools and operations, while governance is more focused on the environment created by staffing and the formulation of regulations, so that subsequent management work can be done well. In other words, governance is the establishment of effective standards and system development.
As for how to carry out information security governance, Hong Weixi pointed out that in formulating standards, in addition to legislators, cross-field experts such as industry and civil society groups are also invited to review the appropriateness of regulations from various aspects and jointly establish governance standards. In addition, information security governance should be based on a control mechanism based on objective facts. For example, records of system access data must be objectively preserved and in line with international regulations. The regulatory system must also continue to collect opinions from industry, government, and academia to continuously improve and improve.
Hong Weixi said that a clear and predictable governance environment is an important basis for attracting international investment. Sometimes systems and innovations conflict. When there is no precedent for system development, it is recommended to establish a "test base" under the protection of laws and regulations. This should make Taiwan's investment environment more sound and allow innovative technologies to be implemented smoothly.
