In the Covid-19 period, facing the challenges from record-breaking cyber attacks, international markets and clients still remain to concern about cybersecurity issues. Ransomeware, weaker cybersecurity at branch offices, supply-chain cybersecurity are continuous and challenging issues around the world. Since cyber attacks become new normal, digital resilience becomes corporate DNA too.
From the viewpoints of compliance, cybersecurity regulations and industry standards are still updated. In addition to ISO 27001, the NIST Cybersecurity Framework (CSF) and IEC/ISA 62443 are embedded in the newly drafting SEMI Cybersecurity Standards and ITRI's Cybersecurity Maturity Model in Taiwan. Based on participation in drafting a standard and its practical implementation, the instructor will share and discuss stories behind those compliance issues.
1. Digital Resilience is Ongoing.
2. Why Care about New Cybersecurity Standards?
3. Introduction to new Standards.
4. Implementation Challenges and Issues.
5. Example: Third-Party NIST CSF Assessment Project.
With over 15 year working experiences, Bright Wu has developed integrated resiliency and recovery practices through cybersecurity, disaster recovery planning (DRP), and business continuity planning (BCP) in a highly vulnerable business environment. Over past three years, Bright Wu was highly invloved with drafting the semiconductor cybersecurity standards at SEMI Taiwan. In addition, he takes a role of NIST CSF assesement consultant and integrate IT, cyberseuciry and OT based on multiple specification standards such as IEC 62443.