Regulations Governing the Reporting, Response and Drills for Cyber Security Incidents Article 12
After a specific non-government agency has completed reporting of a cyber security incident, the central competent authority in charge of the relevant sector shall complete its review of the incident level within the following timeframes, and may change the level based on the review results:1. Within eight hours after receipt of a report of a level 1 or level 2 cyber security incident.2. Within two hours after receipt of a report of a major cyber security incident.After completing the review under the preceding paragraph, the central competent authority in charge of the relevant sector shall, within one hour, submit the review results, the basis for the review, and other necessary information to the competent authority in the manner specified by the competent authority.Upon receipt of the information under the preceding paragraph, the competent authority may review the incident level and change it accordingly. However, where it deems it necessary, or where the central competent authority in charge of the relevant sector fails to report the review results as required, the competent authority may directly review the cyber security incident and change its level.
中文原文 資通安全事件通報及應變辦法第12條
中央目的事業主管機關應於特定非公務機關完成資通安全事件之通報後，依下列規定時間完成該資通安全事件等級之審核，並得依審核結果變更其等級：
一、通報為第一級或第二級資通安全事件者，於接獲後八小時內。
二、通報為重大資通安全事件者，於接獲後二小時內。
中央目的事業主管機關依前項規定完成資通安全事件之審核後，應於一小時內，依主管機關指定之方式，將審核結果、依據及其他必要資訊送交主管機關。
主管機關接獲前項資料後，得就資通安全事件之等級進行覆核，並得為等級之變更。
但主管機關認有必要，或前項之機關未依規定通知審核結果時，得就該資通安全事件逕為審核，並得為等級之變更。
一、通報為第一級或第二級資通安全事件者，於接獲後八小時內。
二、通報為重大資通安全事件者，於接獲後二小時內。
中央目的事業主管機關依前項規定完成資通安全事件之審核後，應於一小時內，依主管機關指定之方式，將審核結果、依據及其他必要資訊送交主管機關。
主管機關接獲前項資料後，得就資通安全事件之等級進行覆核，並得為等級之變更。
但主管機關認有必要，或前項之機關未依規定通知審核結果時，得就該資通安全事件逕為審核，並得為等級之變更。