Regulations Governing the Reporting, Response and Drills for Cyber Security Incidents Article 5
Each agency shall stipulate operational guidelines for the response to cyber security incidents, the content of which shall include the following matters:1. The organization of the response team.2. Drills to be conducted before an incident occurs.3. Damage-control mechanisms upon the occurrence of an incident.4. Recovery, identification, investigation, and corrective mechanisms after an incident occurs.5. Preservation of records relating to the incident.6. Other matters relating to the response of cyber security incidents.
中文原文 資通安全事件通報及應變辦法第5條
各機關應就資通安全事件之應變訂定作業規範，其內容應包括下列事項：
一、應變小組之組織。
二、事件發生前之演練作業。
三、事件發生時之損害控制機制。
四、事件發生後之復原、鑑識、調查及改善機制。
五、事件相關紀錄之保全。
六、其他資通安全事件應變相關事項。
一、應變小組之組織。
二、事件發生前之演練作業。
三、事件發生時之損害控制機制。
四、事件發生後之復原、鑑識、調查及改善機制。
五、事件相關紀錄之保全。
六、其他資通安全事件應變相關事項。