Hsu Nung Yu

GSS Information Service Corporation / Technical Consultant, Cybersecurity Business Development Division

A cybersecurity leader with extensive experience in security operations and governance, complemented by doctoral research in virtual drug discovery for COVID-19. Has operated in highly regulated, high-risk environments with responsibility for cybersecurity defense and incident response. Has frequently served as the sole cybersecurity specialist within organizations, establishing and managing ISO 27001 information security management systems from inception under high-responsibility conditions, including conducting internal and external audits, facilitating cross-functional execution, and communicating risk at the executive level. Has independently identified major security incidents through correlated analysis of firewall, endpoint, and log data, successfully detecting and mitigating long-term persistent threats and zero-day attacks, while leading forensic investigations and recovery efforts for ransomware incidents. Additionally, has supported the Cyber Offensive & Defensive Exercise Project led by the Ministry of Education (Taiwan), applying an attacker’s perspective to strengthen defensive design, with a focus on translating security strategy into actionable, verifiable controls aligned with executive decision-making.

SPEECH