A CEO’s Sustainability Imperative: Turning Digital Security into Corporate Social Responsibility

An elderly person receives a text message that appears to come from a government agency, claiming that they can “click here to claim a subsidy.” Just as the person, unaware of the danger, is about to tap the malicious link, the phone does not redirect to the fraudulent website. Instead, a warning appears: “Dangerous website. Unable to open.”

The growing use of generative AI and deepfake technologies has dramatically lowered the cost of creating fake websites, phishing messages, and fraudulent content, making it increasingly difficult to distinguish what is real from what is false. If anyone can fall victim to such scams, older adults and digitally disadvantaged groups face even greater risks.

This gives “digital inclusion” a new meaning: the gap that needs to be narrowed is no longer only the gap in access to devices, but also the gap in digital safety.

In the AI Era, the “Social” Dimension of ESG Is Being Redefined

When people talk about the “S” in ESG—Social—the first things that often come to mind are charitable activities, investment in rural or underserved communities, and support for disadvantaged groups. However, Jo-Fan Yu, CEO of the Taiwan Network Information Center (TWNIC), believes that as AI rapidly reshapes the way society operates, the meaning of corporate social responsibility must also evolve.

“In the past, when people talked about the ‘S’ in ESG, they often thought first of charitable activities. But in the digital era, whether businesses can help people access accurate information safely and prevent them from being harmed by fake websites or scams is itself an important part of corporate social responsibility,” she said.

Yu noted that when government services, financial transactions, healthcare, and even everyday consumption are all heavily dependent on the Internet, a safe digital environment is no longer merely an information service. It is infrastructure that enables everyone to participate in society on an equal footing.

Yu also acknowledged that the gap will only widen for those who are unable to use AI tools. The real digital divide is no longer simply about “whether people have Internet access,” but whether they can “use the Internet safely and with confidence.”

When vulnerable groups lack the ability to identify AI-generated content, trusted underlying mechanisms are essential to reduce the burden they face in dealing with digital risks. True digital inclusion is not only about getting more people online; it is about ensuring that everyone can use the Internet safely.

Putting Protection Ahead of Risk Is the Real Meaning of Digital Public Good

But how can people reduce their risk of becoming victims without having to possess professional cybersecurity expertise?

According to TWNIC’s 2025 Sustainability Report, the Center has in recent years continued to support the deployment of DNS RPZ, a mechanism for blocking malicious domains. When users accidentally click malicious links in text messages, emails, or social media posts, the system can block access during the DNS resolution process, providing protection before the risk actually materializes.

Yu believes that truly effective technology should not require every user to become a cybersecurity expert. Instead, protection should be built into the design of trusted infrastructure, shifting some of the burden of protection away from individuals.

In other words, the value of DNS RPZ lies not simply in blocking a malicious website, but in protecting users before they even realize that a threat exists.

From Protector to Enabler: Building an Inclusive Digital Society

In the face of cross-border cybercrime, no single organization can defend against every threat on its own. TWNIC therefore continues to promote the Trusted Notifier mechanism, connecting government agencies, cybersecurity communities, and international organizations to build a collaborative cross-sector defense network. This enables newly identified malicious domains to be detected and blocked more quickly.

“A healthy Internet environment requires collaboration among multiple stakeholders,” Yu said.

In addition to technical safeguards, TWNIC also continues to invest in digital literacy and cybersecurity education, with the aim of lowering the barriers to the safe use of technology and enabling more people to participate securely in digital society.

When safety no longer depends solely on an individual’s knowledge or ability, but is instead supported collectively by trustworthy infrastructure, technology can truly become a force for greater social equity.

For business leaders, choosing and building an official domain and digital entry point with strong security protections is not only about safeguarding the company’s own reputation. It is also a practical way to work alongside TWNIC to advance digital inclusion and protect vulnerable groups from fraud—making it a meaningful ESG practice.

Only then can technology truly become a force for social equity and enable everyone to participate in digital life safely and confidently in the age of AI.