Worked for Aon Taiwan, Bright obtains the certificate of member appointment for Electronic Engineering National Standards Technical Committees by Bureau of Standards, Metrology and Inspection (BSMI), Cybersecurity Committee Member at SEMI Taiwan, qualified instructor of cyber governance for the Taiwan Corporate Governance Association and Taiwan Academy of Banking and Finance.
In 2023, Bright wins the ISC2 Global Achievement Award - Mid-Career (APAC)、ISC2 Taipei Chapter Ambassador and to obtain the certificate of SCRUM Master. He have written over thirty articles for Commercial Times (Taiwan, in Chinese) and Bloomberg Businessweek Chinese (China, in Chinese), particularly for SEMI Blogs / Standards Watch, EETimes, and the ISSA Journal.
Being a cybersecurity assessment consultant, Bright integrates IT and factory cybersecurity based on multiple cybersecurity standards, such as the NIST Cybersecurity Framework (CSF) and IEC/ISA 62443. he would expect himself to build a bridge between cyber risk management, information security management system (ISMS), and information security governance (ISG) based on cybersecurity standards.
Recent Publications:
- The Final Countdown After Ransomware Attacks: To Pay or Not to Pay. Harvard Business Review Complex Chinese Edition (2024). https://www.hbrtaiwan.com/case-study/22919/the-final-countdown-after-ransomware-attacks-to-pay-or-not-to-pay
- Can New Taiwan-U.S. Cooperation on Cybersecurity Standards Raise the Profile of Taiwan’s High-Tech Suppliers in the Global Supply Chain? SEMI (2024). https://www.semi.org/en/blogs/technology-and-trends/can-new-taiwan-us-cooperation-on-cybersecurity-raise-the-profile-in-the-global-chip-supply-chain
- The Essence of Cyber Governance: Biggest Questions for Board Members, Intelligent Risk, PRMIA, Nov (2023). https://prmia.org/Public/Resources/Intelligent_Risk_November_2023.aspx
In February, the National Institute of Standards and Technology released version 2.0 of the Cybersecurity Framework (CSF). This version introduces "Govern" as the sixth core function, complementing the existing five functions. To promote cyber governance, CSF version 2.0 echoes the critical role of cyber oversight highlighted by the United States Securities and Exchange Commission in its 2022 Commission Statement and Guidance on Public Company Cybersecurity Disclosures.
Few publicly-listed firms have established cyber governance committees or defined dedicated roles and responsibilities within them. Their frameworks or principles are still evolving and have not yet achieved certified standard status. From our first-hand observations, local cyber risk management has not been fully implemented. This begs the question: is cyber governance akin to medicine or merely a placebo? If cyber governance could indeed guide the cyber risk roadmap, what challenges do we encounter in creating such a roadmap? Furthermore, how does cyber governance relate to the Cybersecurity Framework and the cybersecurity of the supply chain
CYBERSEC 2024 uses cookies to provide you with the best user experience possible. By continuing to use this site, you agree to the terms in our Privacy Policy 。