圖書典藏及影音數位平台

為因應本署三個水資源局水庫關鍵基礎設施之電腦化資訊安全需求，同時配合本署整體資訊安全防護作業需求，以符合行政院函頒之「政府機關（構）資通安全責任等級分級作業規定」A級機關應辦工作事項之相關規範及政府加強資通訊安全管理政策，擬於本署所轄三個水資源局建構完整SOC防護系統，藉由此系統透過數據專線或網際網路連結方式，由專業資訊安全監控廠商，以自有資訊安全監控中心提供全天候即時遠端監控服務，偵測各水資源局及所管水庫關鍵基礎設施之網路環境、重要主機、系統環境與網際網路所產生之資安事故，適時進行隔離網段安全檢測、通報應變、鑑識分析、追蹤處理等回應，並落實網路資訊安全防護執行措施，以提昇現有關鍵基礎設施資訊安全之運作等效益。

The project entitled “2018 Annual Project of Water Sector Critical Information Infrastructure Protection Upgrades And Security Management Plan” of Water Resources Agency, Ministry of Economic Affairs has the major goal of extension functions of Water Resource Information Sharing and Analysis Center (W-ISAC) and building Water Resource Computer Emergency Response Team (W-CERT). Through the exchange of security information, the security level of water sector will be raised. The solid foundation of security information sharing and joint protection was established. In this project, asset inventory and risk assessment were also conducted for the dams and barrage weirs governed by the Northern Region Water Resource Office and Central Region Water Resource Office. The focus is the industrial control systems and related networks since the stability of water resource is highly dependent on them. Through these activities, we have confirmed that the developed methodology for risk assessment is feasible. The methodology may be used for Southern Region Water Resource Office in the coming projects. During the project period, security related training courses were conducted. These activities promote the usage and effectiveness of W-ISAC and the security sense of personnels working in water sector.