Page 37 - 臺灣證券交易所2024年報

(2) The TWSE has strengthened information security measures for listed companies, including revising the “Reference Items for Assessing the Effectiveness of Internal Control Systems,” amending the management guidelines for listed companies’ information and communications security, clearly defining the standard for “materiality” of cybersecurity events, and strongly urging companies to join the Taiwan Computer Emergency Response Team / Coordination Center (TWCERT/CC). We also increased the number of internal control audits on information security for TWSE- listed companies and continued to follow up on the progress of their improvements. To augment overall cyber security, the TWSE conducts relevant education and training courses, assists in reviewing information security incidents, and issues security alerts in a timely manner. (3) To encourage the bolstering of information security protection capabilities, the TWSE provided incentives to 33 securities firms for establishing IPS/WAF security solutions and undergoing Cyber Security Governance Maturity Assessment. We assisted 30 brokerage personnel in acquiring ISO 27001 certification and completed the comprehensive cyber security assessment of 68 brokerage firms. In 2024, there were 50 material information security incidents that were immediately dealt with, six market tests were conducted, and 32 business continuity drills were carried out to ensure the stable operation of the securities market. In addition, we continually assess cybersecurity regulations in response to emerging challenges and address issues such as cloud computing. 3. Enhance TWSE Performance to Support Emerging Business Development (1) The TWSE has introduced new servers for the trading matching system, high-speed InfiniBand interconnect technology, and front-end trading servers to boost the speed, capacity, efficiency, and resilience of the overall system. In addition, the core routers, core switches, firewalls, and other equipment of the new all-in-one system were updated for the subsequent full upgrade to the 10G backbone network. (2) As for the non-trading network, the TWSE replaced nearly 100 storage devices in the Taipei 101 Office, optimized network architecture, upgraded transmission backbone bandwidth, and improved capacity and system resilience in line with Government Configuration Baseline (GCB) standards. 2024 營業報告書 35