Smart City Development in Taiwan: From the Perspective of the Information Security Policy

Rui Sun,Yung Chang Wu,Yenchun Jim Wu

doi:10.3390/su12072916

Abstract

A smart city is developed through the Internet of Things (IoT), cloud computing, big data, mobile Internet, and other new generation technologies regarding information and communication, and data resources in various fields are integrated and applied. The issue of information security in the network era is the strategic focus, as well as the focus of people’s attention, during Taiwan’s smart city construction. Information security policies are the information security guidelines for organizations, and are key to the organization’s information security performance; moreover, such policies show the organization’s support and commitment to the information security of smart cities. This paper discusses the model of information security policy in Taiwan’s smart cities, uses Path Analysis to explore the characteristics of information security policy in smart cities, and examines the relationship between the formulation, implementation, maintenance, and effectiveness of information security policies. Furthermore, this study examines the impact on the effectiveness of organizational information security policies and information security performance from the following aspects: The length of information security policy publication time, policy review, policy advocacy, employee compliance, fair law enforcement, etc., which are all concrete manifestations of the formulation, implementation, and maintenance of information security policy models. Through a questionnaire survey, the correlation between various assumptions, as well as the relationship between organizational information security characteristics, information security policies, and the effectiveness of information security, are verified one by one during the implementation of information security policies. Finally, conclusions and implications are put forward.

Highlights

This study examined whether the information security needs of smart cities increased information security effectiveness via the formulation, implementation, and maintenance of information security policy (ISP) models [36]
This study proposes an information security management strategy based on the contingency theory
Smart cities can implement ISP models to achieve information security goals in accordance with the goals established in the ISP models

Summary

Relationship between Smart City and Information and Communication Technology

A smart city is a new concept and new mode that uses new-generation information technologies, such as IoT, cloud computing, big data, mobile Internet, and spatial geographic information integration to promote intelligent urban planning, construction, management, and service. The fundaments of smart cities are primarily based on the development and application of Information and Communication Technology (ICT), which crosses various disciplines and fields [2]. It encompasses the comprehensive utilization of new-generation ICT, such as IoT data collection, cloud computing, big data applications, Artificial Intelligence (AI), and mobile network transmission. Based on the comprehensive utilization of new-generation ICT, smart cities thoroughly adopt the core technologies and applications of IoT data collection, big data mining and analysis, and cloud computing services [4] to develop novel development models for future cities

Relationship between Smart Cities and Information Security

Intelligent Application

Information Security Policy

Smart City Technology Architecture

Current Situation of Information Security Planning for Taiwan’s Smart Cities

Information Support Technology for Smart Cities

The ISP Model for Smart Cities

Key Tasks for Implementing Information Security Policies

Research Model and Framework

Hypothesis Testing and Model Verification

Hypothesis Test Results

Path Analysis