隨著金融科技的迅速發展和金融產品的多樣化，金融機構面臨越來越複雜的風險和資訊安全挑戰。2024年數位發展部提出數據公益運作指引，推動社會和經濟的可持續發展，惟個人資料的運用面臨隱私保護挑戰及組織資訊安全治理風險。本研究將探索金融機構在數據公益與資訊安全治理方面的挑戰進行分析，並提出相應的策略建議。研究採用質性訪談方法進行整體環境分析，對銀行、證券期貨及保險業的資訊安全從業人員進行深度訪談，收集其在數據公益實踐與資訊安全治理中的經驗和見解。通過質性文本分析工具，對訪談資料進行系統化整理和分析。研究結果顯示，金融機構在數據公益運作中需考慮法律合規、技術實施及風險管理等多方面因素，同時，資訊安全治理策略需與數據公益目標相結合，以確保數據利用的透明性和合法性。基於訪談結果，本研究提出策略建議，包括建立內部資料治理框架、提升技術應用能力及推動跨部門合作，旨在幫助金融機構在推動數據公益的同時，確保資訊安全和金融業務穩定。;With the rapid development of financial technology and the diversification of financial products, financial institutions face increasingly complex risks and information security challenges. In 2024, the Ministry of Digital Affairs proposed guidelines for data altruism operations to promote sustainable social and economic development. However, the use of personal data faces privacy protection challenges and organizational information security governance risks. This study will explore and analyze the challenges faced by financial institutions in data altruism and information security governance and propose corresponding strategic recommendations. The study adopts qualitative interview methods to conduct a comprehensive environmental analysis, conducting in-depth interviews with information security professionals in the banking, securities and futures, and insurance industries to collect their experiences and insights in the practice of data altruism and information security governance. Through qualitative text analysis tools, the interview data is systematically organized and analyzed. The research results indicate that financial institutions need to consider legal compliance, technical implementation, and risk management factors in data altruism operations. Simultaneously, information security governance strategies need to be integrated with data altruism goals to ensure the transparency and legality of data utilization. Based on the interview results, this study proposes strategic recommendations, including establishing an internal data governance framework, enhancing technical application capabilities, and promoting cross-departmental cooperation. The aim is to help financial institutions ensure information security and business stability while promoting data altruism.
