Chapter Two Necessary Matters for the Implementation of the Cyber Security Maintenance Plan
Article 2
The cyber security maintenance plan of the special non-official agency (hereinafter referred to as the special non-official agency), regulated by the National Communications Commission (hereinafter referred to as the Commission), shall include the following items, in addition to the provisions of Paragraph 1, Article 6 of the Enforcement Rules of the Act:
I. Plan for the establishment and implementation of the cyber security detection and protection, unless otherwise deemed exempt from submitting the establishment and implementation plan by the Commission.
II. Measures to be undertaken with regards to security protection of compiled, stored, processed and use of user data when implementing the plan specified in the preceding subparagraph.
III. The plan of implementation that has been verified as cyber security management.
The special non-official agency shall, in accordance with the provisions of Paragraph 3, Article 16 or Paragraph 2, Article 17 of the Act, provide the implementation of the cyber security maintenance plan. It shall include the implementation results and related explanation specified in the subparagraphs of the preceding paragraph, in addition to the provisions of Paragraph 2, Article 6 of the Enforcement Rules of the Act.
Article 3
The special non-official agency shall submit a cyber security maintenance plan to the Commission within three months after receiving notification from the Commission.
Should the provisions of Paragraph 1 of the preceding article be amended, the special non-official agency shall revise its cyber security maintenance plan accordingly and submit it to the Commission.
After the special non-official agency has amended the cyber security maintenance plan, it shall submit the revised plans to the Commission.
If any items specified in the three preceding paragraphs of the submitted cyber security maintenance are deemed incomplete, the special non-official agency shall undertake corrective action within the time period as specified by the Commission.
Article 4
The special non-official agency shall submit the implementation of the cyber security maintenance plan to the Commission within the time period specified notified by the Commission,.