TAIPEI (Taiwan News) — Taiwan’s Ministry of Digital Affairs admitted Monday that management failures allowed a National Institute of Cyber Security employee to improperly access sensitive data, CNA reported.
Speaking at a legislative budget review, Taiwan People’s Party Legislator Chen Ching-lung (陳清龍) proposed cutting NT$10 million (US$306,000) from the institute’s funding and freezing 10% of related funds. Chen said the case showed gaps in internal management and asked how the ministry would better protect data.
KMT Legislator Lu Ming-che (魯明哲) said the case was especially serious because the institute works on the front line of Taiwan’s cybersecurity system. He said the incident pointed to major failures in internal controls.
Digital Affairs Minister Lin Yi-jing (林宜敬) said the ministry discovered the case internally and had taken action. He acknowledged management failures and said institute President Lin Ying-ta (林盈達) had offered to resign to take political responsibility.
National Institute of Cyber Security Vice President Hsu Chien-jung (許建榮) said the institute’s board formed an independent investigation group after the incident. He said the group plans to submit a management review report by the end of June.
Hsu said the institute has also been fixing cybersecurity weaknesses found after the case. He said the work began after the incident and is still underway.
Cyber Security Administration Director-General Tsai Fu-lung (蔡福隆) said the ministry has set up a dedicated unit to handle information security issues. He said the ministry will strengthen internal controls, clarify internal rules, and make the rules easier for staff to follow.
Tsai said some technical workers did not fully understand the legal requirements linked to their work. He said the ministry will provide more training so staff know what they can and cannot do.
