2024 Taiwan Cybersecurity Exposure Inventory

This white paper presents the 2024 Taiwan Cybersecurity Exposure Inventory, executed by CyCraft Technology in collaboration with the National Institute of Cyber Security (NICS). It inventories 87 enterprises and 58 government agencies across six major industries, categorizing eight risk types. The paper quantifies a 'Cybersecurity Hygiene Value' for each industry, revealing high risks in midstream electronics, government agencies, and financial sectors concerning external attack surfaces. It discusses the impact of emerging technologies like IoT and AI on cybersecurity, emphasizing the need for Continuous Threat Exposure Management (CTEM) to address hidden asset risks. The investigation also includes a comparative analysis of 129 foreign companies targeted by ransomware. The white paper outlines cybersecurity defense strategies and remediation plans tailored to specific industries, aiming to enhance overall cybersecurity posture. It further details various scanning categories and methodologies used to assess vulnerabilities and external attack surfaces, providing a comprehensive evaluation of cybersecurity risks in Taiwan.