System patching, intrusion defensing and APT attacks have become the daily life for enterprises. The engineers and business owners are always suffering from the overtime and human resource investments in incident response and system patch. The enterprise can only utilize the R&D resources in productive activities when the frequency and risk of the security incident are mitigated. Is there another way for Engineers, except sleep in the company for endless incident handling? The resources are always limited. How about letting security and engineers fight against the security incident and get off work together on time instead of taking each other’s as the enemies. In this session, David Liu, the CISO of LINE Taiwan, will share experiences about how security and engineering departments work together to build the security culture and skills at LINE.

"People" is one of the three key elements for effective operation of information security, closely linked with "Processes" and "Technology" aspects, but is often the weakest link. How to enhance employees' information security awareness has always been a critical issue. This presentation will explore how to cultivate good information security habits and behaviors, further strengthening the personal and corporate information security defense capabilities.