Jeff Chen

Taishin Financial Holdings / CISO

I was a cybercrime investigator, digital forensics specialist, and head of the information management department in law enforcement agencies for over 20 years. In the past, I investigated several high-profile hacking cases in Taiwan, including the First Bank ATM heist and the Far Eastern Bank SWIFT hacking incident.

Three years ago, I transitioned to Taishin Financial Holdings as the Chief Information Security Officer (CISO). From the perspective of the financial industry, I will summarize my experience in managing incident response effectively.

SPEECH
4/17 (Thu.) 14:00 - 14:30 7F 701A FINSEC Forum
As a cyber security officer in financial industry, digital forensic is not your first consideration in incident response.

From the perspective of the financial industry, cybersecurity officers should review domestic cybersecurity incidents and regulatory amendments to develop policies, procedures, and response teams capable of addressing unknown threats.

Many security teams focus on digital forensics, including disk imaging and malware analysis, while incident response prioritizes containment, eradication, and recovery. However, digital forensics is labor-intensive and may not be suitable in the initial response phase. First responders should swiftly collect key digital evidence using triage tools while ensuring system continuity for consumers.

Before making critical decisions, it is essential to assess regulatory compliance, evaluate potential damage, and consider stakeholder interests to minimize losses effectively.