Regulations Governing the Reporting, Response and Drills for Cyber Security Incidents Article 10
The directly affiliated agencies of the Office of the President, the National Security Council, and the Five Yuans shall plan and carry out cyber security drills for themselves or for their subordinate or supervised government agencies. Within one month after the drills are completed, they shall submit a report on their implementation and results to the competent authority. The drills shall include at least the following items:1. Social engineering drills shall be conducted once every six months.2. Reporting and response drills for cyber security incidents shall be conducted once every year.The Office of the President, the National Security Council, the Five Yuans, and special municipality and county/city councils shall plan and conduct the cyber security drill operations referred to in the preceding paragraph.Special municipality and county/city governments shall, in accordance with Paragraph 1, plan and carry out cyber security drills for themselves or their subordinate or supervised government agencies, as well as the following agencies:1. The township (town, city) offices and district offices of indigenous districts in special municipalities under their jurisdiction, and their subordinate or supervised government agencies.2. The representative councils of townships (towns, cities) and indigenous districts of special munici palities referred to in the preceding subparagraph.
中文原文 資通安全事件通報及應變辦法第10條
總統府、國家安全會議與五院之直屬機關對其自身、所屬或所監督之公務機關，應規劃及辦理資通安全演練作業，並於完成後一個月內，將執行情形及成果報告送交主管機關，演練作業之內容應至少包括下列項目：
一、每半年辦理一次社交工程演練。
二、每年辦理一次資通安全事件通報及應變演練。
總統府、國家安全會議與五院及直轄市、縣（市）議會，應依前項規定規劃及辦理資通安全演練作業。
直轄市、縣（市）政府應依第一項規定對其自身、所屬、所監督之公務機關及下列機關規劃及辦理資通安全演練作業：
一、所轄鄉（鎮、市）公所、直轄市山地原住民區公所與其所屬或所監督之公務機關。
二、前款鄉（鎮、市）民代表會、直轄市山地原住民區民代表會。
一、每半年辦理一次社交工程演練。
二、每年辦理一次資通安全事件通報及應變演練。
總統府、國家安全會議與五院及直轄市、縣（市）議會，應依前項規定規劃及辦理資通安全演練作業。
直轄市、縣（市）政府應依第一項規定對其自身、所屬、所監督之公務機關及下列機關規劃及辦理資通安全演練作業：
一、所轄鄉（鎮、市）公所、直轄市山地原住民區公所與其所屬或所監督之公務機關。
二、前款鄉（鎮、市）民代表會、直轄市山地原住民區民代表會。