Regulations Governing the Reporting, Response and Drills for Cyber Security Incidents Article 6
A government agency shall, within one hour after becoming aware of a cyber security incident, report the matter on the system platform designated by the competent authority.Where the level of the cyber security incident changes under the preceding paragraph, the government agency shall continue to update the report in accordance with the preceding paragraph.Where reporting cannot be made in the manner specified in Paragraph 1 for any reason, the government agency shall report in another appropriate manner within the prescribed timeframe and state the reason why it was unable to report in the prescribed manner.After the reason for being unable to report in the manner required under Paragraph 1 has been eliminated, the government agency shall report the matter retroactively in the prescribed manner.
中文原文 資通安全事件通報及應變辦法第6條
公務機關知悉資通安全事件後，應於一小時內至主管機關指定之系統平臺通報。
前項資通安全事件等級變更時，公務機關應依前項規定，續行通報。
公務機關因故無法依第一項規定方式通報者，應於同項規定之時間內依其他適當方式通報，並註記無法依規定方式通報之事由。
公務機關於無法依第一項規定方式通報之事由解除後，應依該方式補行通報。
前項資通安全事件等級變更時，公務機關應依前項規定，續行通報。
公務機關因故無法依第一項規定方式通報者，應於同項規定之時間內依其他適當方式通報，並註記無法依規定方式通報之事由。
公務機關於無法依第一項規定方式通報之事由解除後，應依該方式補行通報。