Assurance Unknown with Kai-Fan Chang, Chuankai Gao & Hungwei Chen

In this episode I had a discussion in a tea house with Dr. Gao from the IT security department in Institute of Information Industry in Taiwan and Hungwei Chen previously from Winbond. They shared their stories with high assurance security evaluation and the difficulties in promoting security evaluation in an ecosystem. Security is generally considered a cost for the developer and I have yet to see a developer to do security evaluation/certification by freewill when it’s not necessary. As a country or a company you need to make the conscious choice if security is important for your existence on the long run and if investment is needed or worth it. While most people will say that security is important, most companies do not want to invest because it hurts the short term results (costs) and makes the price of the product higher (competitiveness). This episode is purely in Chinese and I know it will make people who only listen to the podcast and do not speak Chinese quite difficult. However, it is really important that people who I interview to feel comfortable to speak out their mind freely and precisely. On the YouTube version you are able to find the subtitles in different languages. Hope you gain some new insights from the conversation.As usual, there is a blog associated with this episode and you can find it here: https://certcle.substack.com/p/the-economy-of-security-certification?r=3smzvoMy website: www.certcle.comInstagram: @certcle