Yang Shih Yu

Ministry of Digital Affairs / Analyst, Department of Information Management

2024 – Present: Analyst, Ministry of Digital Affairs, Common System Division

Responsible for formulating security strategies for the integration and deployment of information systems and developing cloud governance and protection solutions.

2022 – 2024: Analyst, Information Division, Ministry of Health and Welfare

Responsible for cybersecurity technology operations for critical infrastructure in the healthcare sector.

2019 – 2022: Taipei City Government, Department of Information Technology

Responsible for planning the overall cybersecurity protection architecture for the Taipei City Government.

SPEECH

4/17 (Thu.) 11:45 - 12:30 4F 4C Cloud Security Forum Live Translation Session

Cross-Cloud Sharded Encryption and Cloud-Native Security Governance: 2024 Experience Sharing and Future Outlook

1.Experience Sharing on Cloud-Native System Sharded Encryption Backup Implementation:

In line with the cloud backup and recovery enhancement plan for critical administrative systems, a comprehensive cross-cloud sharded encryption backup architecture was constructed and exercised in 2024.

2.Future Outlook on Cloud-Native Application Protection Platform (CNAPP) and Cloud Governance Framework:

During the implementation of the above project, the cloud-native system adopted CNAPP for configuration compliance, security posture management, and vulnerability threat protection. Additionally, the plan aims to extend related results to other units utilizing public cloud services, ensuring effective implementation of cloud governance policies. The framework for two major Landing Zones within the department's cloud environment is also under development.