Taiwan's Cyber Command Restructured, Talent Retention Problems Remain

Taiwan's Information, Communications and Electronic Force Command, or ICEFCOM, often referred to as the military's "fourth service branch," has found itself in an unusual spotlight after twenty of its personnel were placed on a wanted list by Guangzhou police, who accused them of being "primary criminal suspects" in cyber attacks.

While the military officially dismissed the allegations as false, many personnel privately acknowledged that being targeted suggests "they were doing something right."

However, this specialized cyber and electronic warfare unit quietly transferred its field communication units back to the Taiwanese Army on Jan. 1, 2026, reversing an earlier consolidation.

Defense Minister Ku Li-hsiung (顧立雄) told lawmakers that this move allowsthe cyber command to focus on its core mission of electronic warfare and face the critical challenge of cultivating and retaining specialized talent.​

Command Structure Issues

Under former President Tsai Ing-wen (蔡英文), Taiwan established ICEFCOM bypulling together communication and electronic warfarepersonnel primarily drawn from various army corps. （Related： X Says Porn Spam Floods Chinese-Language Searches During Political Unrest ｜ Latest ）

While communication responsibilities were nominally transferred from the army, the command chain still involved the Army Communications Department at the top and communications companies with combined arms brigades at the bottom. Only mid-tier personnel were moved to the new cyber command, creating obstacles in what had been a direct Army command structure.

The recent reorganization in early January 2026 returned these units to the army, allowing it to focus exclusively on cyber and electronic warfare, with Ku suggesting closer cooperation with the telecommunications intelligence unit.

Taiwan's Cyber Retaliation Capability

As cross-strait tensions intensify, beyond visible military threats, China's army continuously wages "invisible warfare" against Taiwan through cyber attacks.

A recent analysis published by Taiwan's National Security Bureau, or NSB, claims that Beijing spread disinformation to Taiwanese audiences through tech companies, public relations firms, and cyber army groups using five main tactics. These tactics include analyzing social dynamics through data, establishing multiple channels for dissemination, using fake accounts to infiltrate public opinion, deploying AI-generated audio and video content, and conducting cyber attacks to hijack Taiwanese accounts.

The NSB reportedly identified over 45,000 suspicious accounts and collected more than 2.314 million pieces of disinformation in 2025, while reporting over 3,200 instances of disinformation to relevant government agencies. （Related： X Says Porn Spam Floods Chinese-Language Searches During Political Unrest ｜ Latest ）

A separate NSB report on Chinese cyber threats to Taiwan's critical infrastructure identified four major attack methods, with an average of 2.63 million daily intrusion attempts in 2025. Hackers also sold stolen medical institution data on dark web forums, with at least 20 incidents reported in 2025.

Taiwan's cyber command has been responding to these escalating Chinese cyber attacks on the front lines. Military sources indicate the command possesses certain offensive capabilities and tools, describing this as an "open secret" within military circles, with one official stating it's "just a matter of choice" whether to use them.

Certification Challenges and Private Sector Poaching Drain Military Talent

While transferring cyber warfare units back to the Army aims to strengthen the command structure, the reorganization still faces significant challenges.

Ku's emphasis on "talent cultivation and retention" reflects real problems, according to an investigation by Storm Media. The number of cyber command personnel receiving professional certification allowances has declined yearly, while departure rates among those receiving allowances continue rising, indicating the military struggles to retain specialized talent. （Related： X Says Porn Spam Floods Chinese-Language Searches During Political Unrest ｜ Latest ）

The cyber command offers five levels of allowances to encourage personnel to enhance their skills and obtain international certifications. However, certification pass rates dropped from approximately 60% in 2022 to about 48% in 2024. Personnel with international certifications are highly sought after by private companies for cybersecurity positions, leading to lucrative job offers that entice military personnel to leave service.​

The high cost of obtaining and maintaining certifications, which can cost tens of thousands of dollars and require periodic renewal, further reduces motivation among military personnel. Without certifications, personnel cannot receive professional allowances, and combined with attractive private sector opportunities, this has led to massive talent outflows. Among those receiving cyber warfare allowances in 2024, 44% left military service. This exodus creates serious capability gaps in Taiwan's cyber competition with China.

Cyber Units Integrated with Intelligence Agencies

The cyber command currently offers five allowance levels, ranging from five to fifty thousand Taiwanese dollars per month.

Despite these substantial incentives by military standards, the combination of military bureaucracy and private sector competition makes retention extremely challenging. Former Chief of General Staff Lee Hsi-ming (李喜明) noted in a 2022-2023 defense assessment that cyber warfare requires highly specialized skills, and other countries such as the U.S. and Israel integrate their cyber units with national intelligence and counterintelligence agencies.​ （Related： X Says Porn Spam Floods Chinese-Language Searches During Political Unrest ｜ Latest ）

Military Routines Stifle Hacker Creativity

The 2022 to 2023 defense assessment highlighted fundamental incompatibilities between cyber warfare personnel and traditional military management. Cyber units function essentially as hackers, and hackers often possess traits that conflict with conventional military leadership approaches, such as valuing freedom, questioning authority, and prioritizing creative problem-solving over repetitive tasks.

Former cyber unit members interviewed for the assessment expressed frustration with military routines, including bed-making, drill exercises, watch duties, security duties, PowerPoint formatting, and rigid sleep schedules with 10 p.m. lights-out and 6 a.m. formations.

When overwhelmed by these requirements, personnel naturally consider private sector positions offering double the salary without such obligations, plus better work-life balance and family time, eliminating incentives to remain in military service.

Organizational Reforms Miss the Mark on Talent Retention

Lee previously argued that cyber warfare personnel possess excellent capabilities but lack advancement opportunities within the existing military structure, as their technical skills don't translate to traditional promotion paths. The significant gap between military and civilian compensation drives talented personnel to leave for better career prospects. Lee suggested that without extracting cyber units from the current structure or integrating them with intelligence agencies, the military cannot retain cyber talent or provide meaningful career development.

The recent reorganization of cyber units represents a precise division of labor, returning communications units to the Army while focusing the cyber command on cyber and electronic warfare. However, this shuffling of organizational charts may not address the fundamental challenge of retaining scarce cyber talent within military ranks.  （Related： X Says Porn Spam Floods Chinese-Language Searches During Political Unrest ｜ Latest ）