Regulations Governing the Reporting, Response and Drills for Cyber Security Incidents Article 4
Each agency shall stipulate operational guidelines for the reporting of cyber security incidents, which shall include the following matters:1. The process and responsibility for the determination of incident levels.2. Assessment of the scope of impact, the extent of damage, and the agency’s response capabilities.3. Internal reporting procedures for cyber security incidents.4. Methods for notifying other agencies affected by the cyber security incident.5. Drills covering the matters set out in the preceding four subparagraphs.6. The reporting point of contact and contact methods for cyber security incident reporting.7. Other matters relating to the reporting of cyber security incidents.
中文原文 資通安全事件通報及應變辦法第4條
各機關應就資通安全事件之通報訂定作業規範，其內容應包括下列事項：
一、判定事件等級之流程及權責。
二、事件之影響範圍、損害程度及機關因應能力之評估。
三、資通安全事件之內部通報流程。
四、通知受資通安全事件影響之其他機關之方式。
五、前四款事項之演練。
六、資通安全事件通報窗口及聯繫方式。
七、其他資通安全事件通報相關事項。
一、判定事件等級之流程及權責。
二、事件之影響範圍、損害程度及機關因應能力之評估。
三、資通安全事件之內部通報流程。
四、通知受資通安全事件影響之其他機關之方式。
五、前四款事項之演練。
六、資通安全事件通報窗口及聯繫方式。
七、其他資通安全事件通報相關事項。