Regulations Governing the Reporting, Response and Drills for Cyber Security Incidents Article 16

Under Paragraph 2, Article 17 of the Act, government agencies shall cooperate with cyber security drill operations planned or conducted by the notified agency, the contents of which may include the following matters:1. Social engineering drills.2. Reporting and response drills for cyber security incidents.3. Cyber offense and defense drills.4. Scenario-based drills.5. Other necessary drills.Under the preceding paragraph, specific non-government agencies shall cooperate with cyber security drill operations planned or conducted by the central competent authority in charge of the relevant sector. However, where such a drill may infringe upon the rights or legitimate interests of a specific non-government agency, it may be conducted only with the agency’s prior written consent.Where cyber security drill operations planned and conducted by the competent authority under Paragraph 4, Article 10 of the Act may infringe upon the rights or legitimate interests of a specific non-government agency, such drill operations may be conducted only with the agency’s prior written consent.
中文原文 資通安全事件通報及應變辦法第16條
公務機關應配合本法第十七條第二項受通報機關規劃或辦理之資通安全演練作業,其內容得包括下列項目:
一、社交工程演練。
二、資通安全事件通報及應變演練。
三、網路攻防演練。
四、情境演練。
五、其他必要之演練。
特定非公務機關應依前項規定配合中央目的事業主管機關規劃或辦理之資通安全演練作業。
但有侵害特定非公務機關之權利或正當利益之虞者,應先經其書面同意,始得為之。
主管機關依本法第十條第四項規定規劃辦理資通安全演練作業,如有侵害特定非公務機關之權利或正當利益之虞者,應先經其書面同意,始得為之。

English translation for reference only; the Chinese text prevails. Not legal advice.