因應著網路犯罪及個資保護等相關課題,本研究採文獻比較法,探討台灣在各政策面向遺漏與缺失。綜觀各國資訊安全政策發展,經研究發現提出結論與建議,如資安弱點應提供獎勵計畫予發現者,給相關單位加強防禦漏洞修補;發展資安產業應加強行銷策略,因應台灣中小企業無冗餘預算於資安防禦,應聯手資安業者提供免費攻擊阻擋;為強調政府培育資安人才決心,建構網路安全專家長期生涯發展地圖,與產業實務連結補強資安菁英培育不足問題及提供就業機會;關鍵資訊基礎設施保護應加強跨部門橫向溝通及定期舉辦跨領域演練確保持續營運計畫可行性。 In response to related issues of cyber crime and personal information protection, this study adopts the literature comparison method to explore the omissions and defects of Taiwan''s policies. Through a comprehensive survey of the developments of national information security policy of other countries, those who put forward conclusions and suggestions like information security vulnerabilities through research deserve reward plans. Hence, the relevant departments in charge may be able to strengthen the defense loopholes. For the sake of the development of the information security industry, marketing strategies should be strengthened. In light of the Taiwan''s small and medium enterprises without redundancy budget in information security defense, it is advisable to joins hands with the information security industry to provide free defense. Besides, in order to demonstrate the government''s determination of cultivating information security talents, a long-term career development strategy for network security experts should be carried out. Establishing a link with industrial practices will be conducive to resolving the lack of information security elite cultivation and providing employment opportunities as well. Critical information Infrastructure protection requires the enhancement of cross-sectoral horizontal communication and cross-disciplinary drills on a regular basis to ensure the viability of ongoing operation plans.