【Taiwan】PwC, a provider of cybersecurity certification courses資安證照開課機構─資誠聯合會計師事務所

資誠（PwC Taiwan）由朱國璋及陳振銑教授於1970年所創立，秉持追求卓越，正直誠信及高品質的專業素養，善盡企業責任，促進變革以贏得公眾信任。五十多年來伴隨臺灣經濟發展業務不斷蓬勃成長。

PwC Taiwan係PwC全球聯盟組織在臺灣之聯盟所，我們的使命是「營造社會誠信，解決重要問題」。PwC是一個科技領先、以人為本的全球聯盟組織，在136個國家擁有逾364,000名專業人員，憑藉深厚的專業智識及科技驅動，提供高品質的審計與確信、稅務與法律、財務顧問與管理顧問等服務，協助客戶創新與重塑，將挑戰轉化為競爭優勢。

2026年度資安職能地圖調查問卷

2026年度資安職能地圖調查問卷

【台灣】資安證照課程開課訊息

 

Course Name	Corresponding licenses	Start Date	End of Day	Place
[All-Smart Network] CISSP Cybersecurity System Expert Certification – Bonus 2- Day Comprehensive Review Course	CISSP	2026-11-27	2026-12-24	Online courses
[All-Smart Network] HTB CPTS Penetration Testing Specialist Certification - Hack the Box Certified Penetration Testing Specialist	CPTS	2026-11-25	2026-11-27	Online courses
[All-Smart Network] CISA – Certified Information Systems Auditor	CISA – Certified Computer Auditor International	2026-11-23	2027-12-02	Online courses
[AllSmartNet] HTB CDSA Defensive Security Analyst Certification - Hack the Box Certified Defensive Security Analyst	CDSA	2026-11-11	2026-11-13	Online courses
[All-Smart Network] CISM Certified Information Security Manager Course	CISM International Information Security Manager Certification Course	2026-11-02	2026-11-06	Online courses

課程名稱	對應證照	開始日	結束日	地點
【全智網】CISSP 資安系統專家認證 – 另加贈 2天總複習班	CISSP	2026-11-27	2026-12-24	線上課程
【全智網】HTB CPTS 滲透測試專家認證- Hack the Box Certified Penetration Testing Specialist	CPTS	2026-11-25	2026-11-27	線上課程
【全智網】CISA – 國際電腦稽核師認證 Certified Information Systems Auditor	CISA – 國際電腦稽核師認證	2026-11-23	2027-12-02	線上課程
【全智網】HTB CDSA 防禦資安分析師認證- Hack the Box Certified Defensive Security Analyst	CDSA	2026-11-11	2026-11-13	線上課程
【全智網】CISM 國際資訊安全經理人認證課程 Certified Information Security Manager Course	CISM 國際資訊安全經理人認證課程	2026-11-02	2026-11-06	線上課程

【Taiwan】Gjun, a provider of cybersecurity certification courses資安證照開課機構─巨匠電腦

Gjun Computer (Gjun Computer Co., Ltd.) was founded in October 1986 by its founder and chairman, Chung Liang-Chuan. Starting with in-person personal computer training, the company has gradually developed into a diversified education group spanning computer information, foreign languages, online cloud education, and corporate training, making it one of Taiwan's most representative tutoring brands.

My connection with Giant began in 1996. After graduating from the Accounting and Statistics Department of Taipei Commercial College (now Taipei University of Business), I was taking a summer break while studying Business Administration at National Pingtung University of Science and Technology (NPUST). I applied for a job at a children's computer tutoring center, and the owners, a husband and wife, were instructors at Giant, so they introduced me to a branch school. Initially, I was assigned to teach AutoCAD, which I found challenging given my business background. Fortunately, I successfully completed the course and officially registered as a part-time instructor.

For the next four years, I taught databases and AutoCAD at Giant's branches in Tainan and Pingtung, earning tuition fees for both the Business Administration Department at NPUST and the Graduate Institute of Business Administration at National Cheng Kung University. Looking back, I was greatly benefited that my tuition and living expenses were covered by my lecturer fees. I also gained a lot of software experience through teaching.

Thirty years later, I still maintain a partnership with Giant Computer and offer specialized corporate courses. Giant's vision is more like "making computers accessible to everyone," which differentiates it from some high-end training institutions in the industry. I highly recommend Giant's ISO27001 LA certification course.

For corporate HR, Giant's advantage lies in its numerous branches. Giant has three systems: 1. Project departments at headquarters; 2. Branch schools in various locations; 3. Certification centers in major cities. Project departments mainly handle tenders and in-house corporate training. Branch schools offer regular courses. Certification centers offer certification courses.

In the future, if our partnership with Giant becomes more regular, we plan to add CompTIA to our cybersecurity role map, which is also within Giant's course scope.

巨匠電腦（巨匠電腦股份有限公司）成立於 1986 年 10 月，由創辦人暨董事長鍾梁權創立。公司從早期的個人電腦實體教學起家，逐步發展為橫跨電腦資訊、外語、雲端線上教學與企業培訓的多角化教育集團，是台灣最具代表性的補教品牌之一。

與巨匠結緣是在1996年，筆者台北商專（現台北商業大學）會計統計科畢業，考上屏東科大二技企管系的暑假，那時我去一家兒童電腦補習班應徵，老闆二夫妻是巨匠的講師，於是介紹我去分校教學。剛開始時我被指派要教AutoCad，對商科出身的我，覺得是個挑戰。還好後來順利完成課程，也正式登錄為兼任講師。

後來四年裡面，屏科大二技企管系和成大企研所，我都在台南和屏東的巨匠分校教資料庫和AutoCad賺學費。現在回頭看，當時的學費和生活費都能從講師費支應，惠我良多。我也從教學裡面累積很多軟體的使用經驗。

30年後，我仍和巨匠電腦保持合作關係，而且開設企業專班的課程。巨匠的願景比較像是「讓人人都能懂電腦」，所以和業界一些追求高端的開課機構有一點區別。我很推巨匠開設的ISO27001 LA認證班。

對企業人資而言，巨匠的優勢在於分校眾多，在巨匠有三個體系：1.總公司的專案部門2.各地分校3.重要城市的認證中心。專案部門主要接標案、企業內訓。各地分校開設常態性的課程。認證中心開設證照課程。

未來如與巨匠合作常態化後，我們的資安職能地圖預計再加入CompTIA，這也是巨匠的課程範圍。

【Taiwan】Al Network, a provider of cybersecurity certification courses資安證照開課機構─全智網

Adhering to the philosophy of applying knowledge to practice as the starting point of our educational planning, we enable students to achieve a seamless integration of learning and application after completing practical courses. This allows them to apply their knowledge in the workplace and enhance their competitive edge. The AIN management team has over 20 years of experience operating multinational educational training institutions, bringing a high-quality educational training operation model to the core of AIN: a dedication to nurturing talent!

"Leave the complexity to Quanzhi Network , and the simplicity to the students" is our core educational and service philosophy, and also the standard we continuously strive to uphold.

AIN has different requirements for its instructors than other training institutions. Instructors must have at least ten years of teaching experience. Instructors in the cybersecurity field must hold the CISSP top-level cybersecurity certification, and instructors in the networking field must hold the CCIE top-level networking certification.

Among cybersecurity certification training institutions in Taiwan, Quanzhi Network is a joint venture run by a group of lecturers who left established institutions to start their own business.

For courses offered by AllSmartNet, I recommend the CISA and CISM courses. These are online courses that are both in-depth and easy to understand. These two courses belong to ISACA (formerly the Information Systems Audit and Control Association), a globally authoritative professional organization focusing on information technology governance, auditing, cybersecurity, and risk management.

Quanzhi.com was the first educational training institution to respond to us after we established the Cybersecurity Function Map website. It felt like they were genuinely listening to us and truly assessing market opportunities. In contrast, some leading companies in the industry are clueless when asked, either passing the buck to their headquarters or requiring clients to write letters for a response. Quanzhi.com not only provided their contact information but also proactively contacted us to inquire about the details of our cooperation.

As a lecturer with 30 years of experience, I know firsthand how the quality of our teaching staff greatly impacts the customer experience of our course providers. Allwise has also secured Hack the Box's attack and defense training courses; once they officially join the platform, we will grant them the necessary permissions.

If you are an HR professional looking for training courses from AllSmart Network , you can easily find the English spelling of certification names on AllSmart Network's official website, such as CISSP, CISM, CISA, CPTS, or CDSA, to see the latest course information. HR professionals are also welcome to use NewMind Security's Cybersecurity Role Map website to manage employee cybersecurity training, funding, and certifications.

秉持著學以致用的理念作為教育規劃的起點，讓學員透過實務課程學習後，能夠達到學用合一的教學成果，實際應用到工作領域，提升職場的競爭優勢。 全智網(AIN)管理團隊擁有外商教育訓練機構營運超過20年以上的經驗，將優質的教育訓練運營模式帶入到AIN核心來，那就是～一顆認真培育人才的心!

「把複雜留給全智網、把簡單留給學員」是我們的核心教育及服務理念也是我們持續深切要求自己的標準

AIN對於授課講師的要求有別於其他訓練機構，授課講師須有至少十年以上的授課經驗。資安領域的講師必需擁有CISSP資安頂級證照，網路領域的講師亦必需具有CCIE網路頂級證照。

在台灣的資安證照教育訓練機構中，全智網是一批從老牌的機構中出走創業的講師合資經營的。

全智網的課，筆者推薦CISA、CISM課程，屬於線上課程，而且深入淺出。這二門課程是ISACA所屬（前身為國際資訊系統審計協會，Information Systems Audit and Control Association），一個專注於資訊科技治理、稽核、資安與風險管理的全球性權威專業組織。

全智網也是我們成立資安職能地圖網站後，第一家對我們有回應的教育訓練機構，感覺他們真的有在聽我們的聲音，也是真正有在評估市場商機。對比產業界的一些龍頭企業，一問三不知，不是推給總公司就是要客戶寫信等回應，全智網不僅提供聯繫方式，還主動聯絡我們並詢問我們合作的細節。

筆者是30年經驗的講師，深知教務同仁的良莠，會極大影響開課機構給客戶的感受。全智網也拿下了Hack the Box的攻擊、防守教育訓練課程，等正式進駐了，我們會再開相關的權限給全智網。

如果您是企業人資，想要找到全智網的教育訓練課程，可輕鬆的在全智網的官網，搜尋證照名稱的英文拼法，比方CISSP, CISM, CISA、CPTS、CDSA即可以看到最新的開課訊息。也歡迎企業人資用新心資安的資安職能地圖網站來管理同仁資安訓練、經費、證照。

【Taiwan】iPAS Junior Cybersecurity Engineer（ iPAS初級資安工程師）

To ensure sufficient talent for industrial upgrading and transformation, Taiwan's Ministry of Economic Affairs launched a special project in 2016 to promote the assessment of industrial talent capabilities. This project integrates the resources of industry, government, academia, and research institutions to establish a capability assessment system and expand the range of examinations. The Ministry of Economic Affairs issues capability assessment certificates and encourages companies to prioritize interviewing/hiring and offer higher salaries to certified individuals. 

Therefore, in response to the development trends and talent needs in the domestic information security field, we are planning an industry talent competency assessment system. This system aims to effectively guide schools and training institutions to plan courses according to industry needs, thereby helping students narrow the gap between learning and application in their employment. At the same time, it encourages students and professionals in related fields to take the exam, guides private institutions to invest in the training industry, and cultivates talents that meet the needs of industry and enterprise upgrading and transformation through a training-examination-application cycle. It also provides objective reference for enterprises to select outstanding key talents, thereby improving the quality and competitiveness of information security industry talents.

This certification is an entry-level certification and is not listed in the list of cybersecurity certifications recognized by Taiwan's Ministry of Digital Development. However, it still attracts many Taiwanese candidates to take the exam. This is because the prevalence of ransomware has led to a surge in corporate demand for cybersecurity expertise, with companies willing to offer relatively high salaries. Furthermore, as companies expand into international markets, they face compliance requirements under laws such as the CRA, GDPR, and various countries' personal data protection laws, necessitating cybersecurity professionals to penetrate these markets.

The Junior Cybersecurity Engineer exam consists of two subjects: Introduction to Information Security Management and Introduction to Information Security Technology. Each subject has 50 multiple-choice questions, each worth 2 points, with no penalty for incorrect answers. The passing score for each subject is 70 points. However, if the average score is 70 points but the passing score is not lower than 60 points, the certification standard is still met.

For corporate HR professionals, obtaining this certification signifies the ability and basic knowledge of cybersecurity. Students can work as cybersecurity interns, while experienced individuals can serve as managers managing ISO 27001 cybersecurity compliance documents or as technical cybersecurity assistants. Salary is approximately NTD 40,000-450,000.

 

Subject	Evaluation Theme	Evaluation content	Knowledge Points
Subject 1: Introduction to Information Security Management	1. Information Security Management Concept	1-1. Information Security Management System	• Definitions, basic concepts, and contextual applications of data confidentiality, integrity, and availability. • Basic concepts of information security management systems, such as implementation steps, ISO standard verification, audit activities, system monitoring, and entity control measures. • Important domestic and international cybersecurity regulations, compliance and privacy-related frameworks, and operational guidelines. • Important cybersecurity incidents and concepts relevant to current events.
		1-2. Overview and Compliance of Relevant Laws and Regulations
		1-3. Privacy Protection and Intellectual Property Rights
	2. Asset and Risk Management	2-1. Asset Classification, Grading, and Inventory	• Basic concepts of information asset classification, grading, and inventory • Basic concepts of information asset management principles and procedures • Basic concepts of risk definition, risk assessment and treatment, and risk evaluation
		2-2. Risk Assessment and Risk Management
	3. Access control, encryption/decryption, and key management	3-1. Access Control and Authentication	• Basic concepts of access control methods and principles, such as network system access management and organizational internal access control policies. • Basic concepts of access control and authentication mechanisms, such as biometric identification, keys, credentials, and encryption/decryption mechanisms.
		3-2. Encryption/Decryption and Key Lifecycle
	4. Accident Management and Operational Continuity	4-1. Incident and Accident Management	• Basic concepts of incident handling, such as: notification and response operations, log comparison, chain of custody, etc. • Basic concepts of data backup and operational continuity management
		4-2. Standby and Operational Continuity

 

 

Subject	Evaluation Theme	Evaluation content	Knowledge Points
Subject Two: Introduction to Information Security Technology	1. Network and communication security	1-1. Network Security	• Basic concepts of common network attack techniques • Basic concepts of network devices and network communication protocols • Basic concepts of firewalls
		1-2. Communication Security
	2. Operating System and Application Security	2-1. Operating System Safety	• Basic concepts of common network attack methods, such as ransomware, denial-of-service attacks, SQL injection , phishing , CSRF , and XSS . • Basic concepts of network devices and network communication protocols. • Basic concepts of firewalls.
		2-2. Operating System and Application ( including databases and web pages ) Attack Methods
		2-3. Program and Development Security
	3. Cybersecurity Maintenance Technology	3-1. Malicious Program Protection and Vulnerability Management	• Basic concepts of commonly used vulnerability scanning tools, understanding and prevention of malware • Basic concepts of database security backup mechanisms, restoration, and destruction • Basic concepts of password storage and protection • Basic concepts of system log management and analysis
		3-2. Data Security and Backup Management
		3-3. Log Management
	4. Emerging technology security	4-1. Introduction to Cloud Security	• Basic concepts of cloud information system security management • Basic concepts of mobile device protection • Basic concepts of smart manufacturing and Internet of Things protection

台灣的經濟部為充裕產業升級轉型所需人才，於105年起專案推動產業人才能力鑑定業務，整合產官學研共同能量，建立能力鑑定體制及擴大辦理考試項目，由經濟部核發能力鑑定證書，並促進企業優先面試/聘用及加薪獲證者。 

爰此，因應國內資訊安全領域發展趨勢與人才需要，策劃產業人才之能力鑑定制度，期有效引導學校或培訓機構因應產業需求規劃課程，以輔導學生就業縮短學用落差，同時鼓勵我國在校學生及相關領域從業人員報考，引導民間機構投入培訓產業，以訓考用循環模式培養符合產業及企業升級轉型所需人才並提供企業選用優秀關鍵人才之客觀參考依據，以提升資訊安全產業人才之素質與競爭力。

這張證照是入門級證照，也未列入台灣的數位發展部認可的資安證照清單之列。但仍吸引很多台灣考生報名考試。原因是因為勒索病毒盛行，企業資安需求大增，願意用相對高薪徵才；以及企業在拓展國際市場時，有CRA、GDPR、各國個資法等法令的合規要求，需要懂資安的人才才能打進去。

初級資安工程師考試分為二科，資訊安全管理概論、資訊安全技術概論，每科考50題單選題，每題2分答錯不倒扣，及格分數各為70分，但如果平均達到70分而不及格科目未低於60分，仍達到授證標準。

對企業人資而言，取得這張證照，代表具有資安的學習能力和基礎知識，如為在學學生可以擔任資安實習生，如為經驗人仕，可以擔任管理面的企業資安合規ISO27001的文件經營管理員，或者技術面的資安助理人員。薪水大約NTD40000-450000。

科目	評鑑主題	評鑑內容	知識點
科目一： 資訊安全 管理概論	1. 資訊安全管理概念	1-1. 資訊安全管理系統	• 資料機密性、完整性與可用性之定義、基本觀念，以及情境應用之理解 • 資訊安全管理系統之基本觀念，如：導入步驟、 ISO 標準驗證、稽核活動、系統監控、實體控制措施等 • 國內外重要資安法規，合規及隱私相關框架作業規範 • 與時事相關之重要資安事件與概念
		1-2. 相關法規概論與遵循
		1-3. 隱私權保護與智慧財產權
	2. 資產與風險管理	2-1. 資產分類分級與盤點	• 資訊資產分類分級與盤點之基本觀念 • 資訊資產管理原則與程序之基本觀念 • 風險定義、風險評估與處理及風險評鑑之基本觀念
		2-2. 風險評鑑與風險處理
	3. 存取控制、加解密與金鑰管理	3-1. 存取控制與身份認證	• 存取控制的方法與原則之基本觀念，如：網路系統存取管理、組織內部存取控制政策等 • 權限管理與身分認證機制之基本觀念，如：生物特徵辨識、金鑰、憑證、加解密機制等
		3-2. 加解密與金鑰生命週期
	4. 事故管理與營運持續	4-1. 事件與事故管理	• 事故處理之基本觀念，如：通報應變作業、日誌比對、證據保管鏈等 • 資料備援與營運持續管理之基本觀念
		4-2. 備援與營運持續

 

 

科目	評鑑主題	評鑑內容	知識點
科目二： 資訊安全 技術概論	1. 網路與通訊安全	1-1. 網路安全	• 常見網路攻擊手法之基本觀念 • 網路設備與網路通訊協定之基本觀念 • 防火牆之基本觀念
		1-2. 通訊安全
	2. 作業系統與應用程式安全	2-1. 作業系統安全	• 常見網路攻擊手法之基本觀念，如：勒索病毒、阻斷服務、 SQL Injection 、 Phishing 、 CSRF 、 XSS 等 • 網路設備與網路通訊協定之基本觀念 • 防火牆之基本觀念
		2-2. 作業系統與應用程式 ( 含資料庫與網頁 ) 攻擊手法
		2-3. 程式與開發安全
	3. 資安維運技術	3-1. 惡意程式防護與弱點管理	• 常用漏洞掃描工具、惡意程式的認識及防範之基本觀念 • 資料庫安全備份機制、復原、銷毀之基本觀念 • 密碼儲存與保護之基本觀念 • 系統日誌管理與分析之基本觀念
		3-2. 資料安全及備份管理
		3-3. 日誌管理
	4. 新興科技安全	4-1. 雲端安全概論	• 雲端資訊系統安全管理之基本觀念 • 行動裝置防護之基本觀念 • 智慧製造及物聯網防護之基本觀念
		4-2. 行動裝置安全概論
		4-3. 智慧製造及物聯網安全概論