Regulations Governing the Reporting, Response and Drills for Cyber Security Incidents Article 7
The agency notified pursuant to Paragraph 2, Article 17 of the Act shall, after receiving a report of a cyber security incident, complete its review of the incident level within the following timeframes and may change the level based on the review results:1. Within eight hours after receipt of a report of a level 1 or level 2 cyber security incident.2. Within two hours after receipt of a report of a major cyber security incident.After completing the review under the preceding paragraph, the notified agency shall, within one hour, notify the competent authority of the review results and provide information on the basis for the review.Upon receipt of the notification under the preceding paragraph, the competent authority shall further review the incident level based on the relevant information and may change the level based on the review results. However, where it deems it necessary, or where the notified agency fails to notify the review results as required, the competent authority may directly review the cyber security incident and change its level.
中文原文 資通安全事件通報及應變辦法第7條
本法第十七條第二項受通報機關於接獲通報資通安全事件後，依下列規定時間完成該資通安全事件等級之審核，並得依審核結果變更其等級：
一、通報為第一級或第二級資通安全事件者，於接獲後八小時內。
二、通報為重大資通安全事件者，於接獲後二小時內。
前項受通報機關依規定完成資通安全事件等級之審核後，應於一小時內將審核結果通知主管機關，並提供審核依據之相關資訊。
主管機關接獲前項之通知後，應依相關資訊，就資通安全事件之等級進行覆核，並得依覆核結果變更其等級。
但主管機關認有必要，或前項之機關未依規定通知審核結果時，得就該資通安全事件逕為審核，並得為等級之變更。
一、通報為第一級或第二級資通安全事件者，於接獲後八小時內。
二、通報為重大資通安全事件者，於接獲後二小時內。
前項受通報機關依規定完成資通安全事件等級之審核後，應於一小時內將審核結果通知主管機關，並提供審核依據之相關資訊。
主管機關接獲前項之通知後，應依相關資訊，就資通安全事件之等級進行覆核，並得依覆核結果變更其等級。
但主管機關認有必要，或前項之機關未依規定通知審核結果時，得就該資通安全事件逕為審核，並得為等級之變更。