Written by Margaret Siu and Tommy Hall.
Image credit: Ministry of Digital Affairs Office 20230306 by Yu tptw/ Wikimedia Commons, license: CC BY-SA 4.0.
In an era where digital technology permeates every aspect of our lives, national security strategies increasingly hinge on robust cybersecurity measures. This is particularly evident in the approaches of Taiwan and Japan, two democratic governments at the forefront of integrating advanced technological defences against emerging digital threats. The evolving cybersecurity strategies of Taiwan and Japan are not merely reactive measures to emerging threats but are emblematic of broader global trends where digital security is inextricably linked to political stability. Their experiences offer vital insights for other governments grappling with similar challenges, emphasising the importance of agility, technological innovation, and international cooperation in crafting national security strategies for an interconnected digital world.
Taiwan’s Cybersecurity in the Face of US Scepticism and National Security
Taiwan’s geopolitical position, particularly its complex relationship with the People’s Republic of China (PRC), places it at the centre of digital political conflict. This is exacerbated by the concept of “US Scepticism,” a term coined by Kuang-Shun Yang of US-Taiwan Watch. It represents a series of narratives, often promoted by PRC-linked entities, that encourage Taiwan to distance itself from the United States, aiming to destabilise Taiwanese politics. These narratives, gaining momentum, especially after the US military’s withdrawal from Afghanistan, portray the US as an unreliable ally, influencing Taiwan’s foreign policy and public opinion. This represents a targeted campaign to erode the foundation of Taiwan-US relations, shifting from critiques of unbalanced exchanges to allegations of abandonment and exploitation.
Recognising the increasing challenges and the surge in cyberattacks, Taiwan has elevated cybersecurity to a national security priority. Cyberattacks, which involve the intentional misuse of computer systems, networks, or digital technologies to disrupt, damage, or illicitly access information, pose a significant threat. In response, cybersecurity efforts are being intensified, focusing on strategies, practices, and technologies that protect digital environments against such attacks. These measures are crucial for maintaining the integrity, confidentiality, and availability of information within these systems. Cyberattacks can have far-reaching implications, such as when the targeted information systems overlap with a nation’s critical infrastructure. In other words, if the systems used by energy, medical, and transportation companies come into the crosshairs of malign actors, then cybersecurity failures quickly spill over to the physical world.
Hence, to address these concerns, the government has implemented significant measures, including the establishment of the National Institute of Cyber Security (NICS). Furthermore, Taiwan is actively collaborating with international partners, notably the United States, to strengthen its digital defences. In this context, President Tsai Ing-wen’s administration is making concerted efforts to enhance cybersecurity, working in partnership with the U.S. Department of Commerce’s National Institute of Standards and Technology (NIST). This collaboration is aimed at developing a resilient digital infrastructure, one capable of countering external cyber threats and combating internal disinformation, thereby ensuring the security and stability of Taiwan’s information networks. This proactive approach reflects an understanding that robust cybersecurity is not just a technological issue but a cornerstone of national and international security in the modern digital era.
To effectively counter “US Scepticism” and escalating cyber threats, Taiwan is adopting an all-encompassing approach. This strategy involves improving information accessibility and fostering digital literacy alongside deploying strategic communication and embracing multidisciplinary research. Key to this strategy is the government’s support for initiatives like the Taiwan Pàng-phuānn Association of Education’s workshops. These workshops play a pivotal role in heightening public awareness and underscoring the necessity of discerning credible information. By educating a wide spectrum of the population, from students to senior citizens, these workshops are instrumental in building a society well-versed in navigating the complexities of the digital age. This comprehensive approach not only combats misinformation and cyber threats but also bolsters the democratic fabric of Taiwan by empowering its citizens with the knowledge and skills to critically evaluate and engage with information in the cyber realm.
Japan’s Cybersecurity Reformation
Parallel to Taiwan, Japan’s National Security Strategy (NSS) of 2022 marks a significant shift in its defence posture, particularly emphasising the integration of advanced technology, including AI, in cybersecurity and information warfare. This strategic pivot is a response to heightened global cybersecurity threats and geopolitical tensions. A key aspect of Japan’s enhanced cybersecurity strategy is the establishment of a new government body dedicated to combating disinformation and leveraging AI for intelligence gathering. This development signifies Japan’s proactive approach to adapting to the challenges posed by modern digital warfare. The specific details of how this new government body will be structured, manned, and utilised are yet unknown, but the mandate in itself indicates a huge leap in progress.
This new body is not forming without a clear necessity. For instance, Japan’s cybersecurity defences were tested by a significant breach at the National Centre of Incident Readiness and Strategy for Cybersecurity (NISC) attributed to Chinese state-backed hackers. This breach, which compromised sensitive data and went undetected for an extended period, underscores Japan’s vulnerability in safeguarding its digital infrastructure, particularly in the context of its deepening military alliances and exchange of sensitive information with countries like the US, UK, and Italy. In response, Japan plans to expand its cyber unit within the Japan Self-Defence Forces, aiming to increase both personnel and expertise. This is part of a broader initiative to fortify Japan’s cyber defence capabilities.
The updated NSS of Japan marks a decisive shift towards a more assertive stance in information warfare, a move partly motivated by the hybrid warfare techniques seen in the Ukraine conflict. Key to this strategy is the establishment of a new governmental structure dedicated to the collection and analysis of disinformation from foreign sources. This initiative underscores the critical importance of tackling this modern warfare dimension. Moreover, Japan is advancing its cybersecurity posture by adopting active cyber defence strategies. This proactive approach goes beyond mere defence against cyberattacks; it involves the anticipatory neutralisation of potential cyber threats. In this light, Japan’s proactive approach is following trends set out by the U.S.’s cyber-security strategy, including modernising cyber defences, integrating government bodies responsible for response, and making attempts to “disrupt and dismantle” malicious actors before they have a chance to strike first.
Central to these advancements is the transformation of the NISC. The restructuring of NISC aims to forge a more potent and cohesive cybersecurity organisation, one that will play a pivotal role in directing and synchronising Japan’s cyber defence tactics. This move is indicative of Japan’s firm commitment to bolstering its cybersecurity capabilities, aspiring to match the response proficiency of leading Western nations in this domain. Achieving this would significantly enhance Japan’s stature in the international arena of cybersecurity readiness and defence, making it a formidable player in countering cyber threats globally.
Distinct Paths in Cybersecurity Strategy
In comparing the cybersecurity strategies of Taiwan and Japan, we observe distinct approaches shaped by their unique geopolitical contexts and challenges. Taiwan’s strategy, heavily influenced by its intricate relationship with the People’s Republic of China and the phenomenon of “US Scepticism,” focuses on a broad-based approach. This encompasses not just technological advancements but also public education and information literacy. Taiwan’s emphasis on educating its citizenry, as seen through initiatives like the Taiwan Pàng-phuānn Association of Education’s workshops, reflects a holistic approach. It recognises that cybersecurity is not only a matter of national defence but also of public awareness and engagement. This strategy, particularly relevant in the run-up to the 2024 Presidential election, aims to fortify the democratic fabric against misinformation and external influence.
Japan, on the other hand, has pivoted its cybersecurity strategy as part of its 2022 National Security Strategy. This shift includes a heightened focus on integrating advanced technologies like AI into its defence mechanisms. The restructuring of NISC and the emphasis on active cyber defence indicate a more assertive and technologically driven approach. Japan’s response, especially in the wake of significant breaches such as the attack on NISC, suggests a strategy that leans heavily on enhancing technological defences and expanding its cyber units within the Self-Defence Forces. This approach seems more aggressive and focused on building robust defensive capabilities to counteract external cyber threats.
While both countries have made significant strides in bolstering their cybersecurity, they also face potential limitations. Taiwan’s strategy, while comprehensive, might face challenges in ensuring that the public’s digital literacy keeps pace with the sophistication of cyber threats. The effectiveness of public education initiatives in a rapidly evolving digital landscape remains an ongoing challenge. For Japan, the focus on technological advancements and expanding defence capabilities might overlook the subtleties of information warfare, such as the influence of misinformation and public perception, areas where Taiwan has invested considerable effort.
In terms of potential success, Taiwan’s holistic approach, which combines technology with public awareness, appears to have an edge in creating a resilient and informed society. However, Japan’s focused investment in technology and defence might provide it with a stronger shield against external cyber threats. The extent to which Japan’s new government body dedicated to tackling disinformation will be able to liaise with non-governmental counterparts is crucial to readiness. Both strategies, however, reveal an acute awareness of the evolving nature of cybersecurity and the need for dynamic and adaptable approaches.
Ultimately, the success of these strategies will depend on how well they can anticipate and adapt to future cyber threats. Both Taiwan and Japan offer valuable models for other nations, demonstrating the importance of a nuanced approach to cybersecurity that balances technological advancement with public engagement and awareness. As the digital landscape continues to evolve, the experiences of Taiwan and Japan will remain critical in shaping global approaches to cybersecurity and national security.
Tommy Hall graduated from West Point with a B.Sc. in Foreign Languages: Chinese. He is a Marshall Scholar, currently reading for an M.St. in Diplomatic Studies at the University of Oxford. At Oxford, Tommy serves as the Book Review Editor and Opinion Editor for STAIR (St. Antony’s International Review). In 2023, he completed an M.A. in Chinese Studies at SOAS, University of London. Additionally, Tommy is the founder of the Center for Holocaust and Genocide Studies’ Human Rights Initiative (HRI). His peer-reviewed work has previously been published in the Army Cyber Institute’s Cyber Defense Review.
Margaret Siu is a JD candidate at Harvard Law School with a focus on U.S.-East Asian economic statecraft and critical supply chains. She holds a Marshall Scholarship, having earned her M.Sc. at the University of Oxford and the London School of Economics and Political Science. Siu is actively involved in leadership positions with the Harvard International Law Journal and the advisory board of the Oxford Silk Road Society. She is also the founder of Apricity Magazine, an international arts journal. Her notable contributions include work for the UK National Committee on China, Oxford Political Review, and the China Project (SupChina). Siu has prior experience with the Human Rights Initiative at the Center for Strategic and International Studies (CSIS) and in the Trade and Investment team at Taiwan Semiconductor Manufacturing Company’s Corporate and Compliance Legal Division.
This article was published as part of a special issue on Digital Governance in Taiwan and Japan.
