Enforcement Rules of the Cyber Security Management Act Article 4

Before designating enterprises, organizations, or institutions controlled by the government pursuant to Subparagraph 10, Article 3 of the Act, the central competent authority in charge of the relevant sector shall provide them with an opportunity to present their views. The same requirement applies to the designation of critical infrastructure providers under Paragraph 1, Article 20 of the Act.