After several major information security incidents in Taiwan's financial sector, both the supervisory authorities and the financial industry have invested considerable efforts to enhance and improve the level of financial information security protection. However, the defensive front of banks is getting longer and longer, and hackers' attacks are becoming more challenging. In addition to the implementation of existing policies and continuous improvement, financial information security should also be further thought about the issues or problems faced at this stage.