NCHU Course Outline
Course Name (中) 資通安全法合規研究與管理實務(6130)
(Eng.) Regulation and Compliance Practice Study on Cyber Security Management Act
Offering Dept Department of Management Information Systems
Course Type Elective Credits 3 Teacher CHEN, YU-YI
Department Department of Management Information Systems / Graduate Language Chinese Semester 2026-SPRING
Course Description
Prerequisites
Relevance of Course Objectives and Core Learning Outcomes(%) Teaching and Assessment Methods for Course Objectives
Course Objectives Competency Indicators Ratio(%) Teaching Methods Assessment Methods

1.Professional Knowledge and Practical Application
2.Independent Analysis
3.Innovative Research
4.Leadership、communication and teamwork
5.Social Responsibilities and Global Vision
50
10
10
20
10
topic Discussion / Production
Discussion
Lecturing
Written Presentation
Attendance
Oral Presentation
Assignment
Course Content and Homework/Schedule/Tests Schedule
Week Course Content
Week 1 課程介紹:
資通安全法合規研究與管理實務指引
https://sites.google.com/email.nchu.edu.tw/isms-book
資安法到ISO 27001的稽核攻防:AI神隊友助力
https://sites.google.com/email.nchu.edu.tw/isms-audit
Week 2 以兩週時間探討下列三個議題:

1.資通安全責任等級分級辦法附件十資通系統防護基準之要求 >> 漏洞修復:系統之漏洞修復應測試有效性及潛在影響,並定期更新。
https://law.moj.gov.tw/LawClass/LawAll.aspx?pcode=A0030304

2.內外部議題或新興議題
https://tinyurl.com/34htebf2

3.利害關係人關注紀錄及回應處置
https://sites.google.com/email.nchu.edu.tw/stakeholder

有何差異?如何有效落實?
Week 3 同上
Week 4 探討「圍棋佈局 vs ISO 27001」,運用棋局比喻將抽象的資安管理概念具象化。透過「金角銀邊」、「全局意識」、「收官」等棋理,逐步帶領讀者理解 ISO 27001 的精神:範圍界定、策略協同、資安政策、目標訂定、風險評鑑、...等。這樣的設計讓學習 ISO 27001 不再只是條文解讀,而能直觀感受到其背後的戰略思維與全局觀。
https://tinyurl.com/3tmavuym
Week 5 第2、3週主題分組報告
Week 6 探討「詳細風險評鑑方法改良」,存在問題及改善方向。
https://tinyurl.com/zt7xdvte
Week 7 校慶及運動會補假
Week 8 期中考週
Week 9 探討「圍棋佈局 vs ISO 27001」(補充資安政策的探討、以及後半段的文件化資訊控制、運作規劃與控制、監督量測、內部稽核、管理審查、矯正預防)
https://tinyurl.com/3tmavuym
探討「ISO 27001新增控制項」
https://tinyurl.com/yc8746wn
Week 10 Google Workspace Studio應用觀摩
1. Workspace Studio Help:https://support.google.com/workspace-studio/
2. Google Workspace Studio 訓練與說明資源 https://support.google.com/a/users/answer/16275487?hl=zh-Hant
3. Google Workspace Studio 影片:https://www.youtube.com/playlist?list=PLDdffPXqmxKNtTUF7H3mab3HEnXzxRi8V
4. 擴充 Google Workspace Studio 功能:https://developers.google.com/workspace/add-ons/studio?hl=zh-tw
Week 11 分組報告
Week 12 資通安全實地稽核結果分析研討
Week 13 資通安全實地稽核項目探討
Week 14 分組報告
Week 15 分組報告
Week 16 期末
self-directed
learning
   03.Preparing presentations or reports related to industry and academia.

Evaluation
課堂報告30%,書面報告50%,出席狀況20%
Textbook & other References
資通安全法合規研究與管理實務指引
https://sites.google.com/email.nchu.edu.tw/isms-book
資安法到ISO 27001的稽核攻防:AI神隊友助力
https://sites.google.com/email.nchu.edu.tw/isms-audit
Teaching Aids & Teacher's Website

Office Hours

Sustainable Development Goals, SDGs(Link URL)
04.Quality Education   08.Decent Work and Economic Growth   09.Industry, Innovation and Infrastructureinclude experience courses:N
Please respect the intellectual property rights and use the materials legally.Please respect gender equality.
Update Date, year/month/day:2026/05/19 09:17:07 Printed Date, year/month/day:2026 / 5 / 26
The second-hand book website:http://www.myub.com.tw/