Regulations Governing the Handling of Cyber Security Matters by Personnel of Government Agencies Article 20
The following situations qualify for disciplinary action:1. Failure to handle the following matters in accordance with the Act, regulations prescribed under the Act, or the agency’s internal rules, where the circumstances are significant:(1) Cyber security information sharing operations.(2) Formulation, revision, and implementation of cyber security maintenance plans.(3) Submission of reports on the implementation of cyber security maintenance plans.(4) Audit of implementation of cyber security maintenance plans.(5) Submission of a corrective action report in response to the audit results of the implementation of cyber security maintenance plans conducted by the competent authority and the agencies referred to in Article 15 of the Act.(6) Establishment of reporting and response mechanisms for cyber security incidents.(7) Reporting or response operations for cyber security incidents.(8) Submission of investigation, handling, and corrective action reports regarding cyber security incidents.2. Poor performance in handling cyber security affairs, as rated by the competent authority, a superior authority, or a supervisory authority, where guidance has proved ineffective and the circumstances are significant.3. Other violations of the Act, regulations made under its authority, or an agency’s internal rules in a serious circumstance.4. Poor supervision of task operations resulting in their subordinates or personnel of affiliated units or supervised agencies falling in any circumstance of the preceding three subparagraphs.
中文原文 公務機關所屬人員資通安全事項獎懲辦法第20條
有下列情形之一者，予以懲處：
一、未依本法、本法授權訂定之法規或機關內部規範辦理下列事項，情節重大：
（一）資通安全情資分享作業。
（二）訂定、修正及實施資通安全維護計畫。
（三）提出資通安全維護計畫實施情形。
（四）辦理資通安全維護計畫實施情形之稽核。
（五）配合主管機關及本法第十五條所定機關資通安全維護計畫實施情形稽核結果，提出改善報告。
（六）訂定資通安全事件通報及應變機制。
（七）資通安全事件之通報或應變作業。
（八）提出資通安全事件調查、處理及改善報告。
二、辦理資通安全業務經主管機關、上級或監督機關評定績效不良，經疏導無效，情節重大。
三、其他違反本法、本法授權訂定之法規或機關內部規範之行為，情節重大。
四、對業務督導不力，致其屬員、所屬或所監督機關之人員有前三款情形之一。
一、未依本法、本法授權訂定之法規或機關內部規範辦理下列事項，情節重大：
（一）資通安全情資分享作業。
（二）訂定、修正及實施資通安全維護計畫。
（三）提出資通安全維護計畫實施情形。
（四）辦理資通安全維護計畫實施情形之稽核。
（五）配合主管機關及本法第十五條所定機關資通安全維護計畫實施情形稽核結果，提出改善報告。
（六）訂定資通安全事件通報及應變機制。
（七）資通安全事件之通報或應變作業。
（八）提出資通安全事件調查、處理及改善報告。
二、辦理資通安全業務經主管機關、上級或監督機關評定績效不良，經疏導無效，情節重大。
三、其他違反本法、本法授權訂定之法規或機關內部規範之行為，情節重大。
四、對業務督導不力，致其屬員、所屬或所監督機關之人員有前三款情形之一。