Enforcement Rules of the Cyber Security Management Act Article 5
A “major cyber security incident” as defined in Subparagraph 5, Paragraph 1, Article 4 of the Act refers to an incident involving a private sector entity that meets one of the following criteria and poses a significant risk to social public interest, people’s daily lives, or economic activity, while also drawing substantial public attention:1. Serious disclosure of core business information.2. Serious tampering with core business information or core information and communication systems.3. The operation of core information and communication systems is affected or interrupted, and cannot be restored to normal operation within the tolerable interruption time.
中文原文 資通安全管理法施行細則第5條
本法第四條第一項第五款所稱重大資通安全事件，指民間單位有下列情形之一者，並對社會公共利益、國民生活或經濟活動有重大影響之虞，且受社會矚目之事件：
一、核心業務資訊遭嚴重洩漏。
二、核心業務資訊或核心資通系統遭嚴重竄改。
三、核心資通系統之運作受影響或停頓，無法於可容忍中斷時間內回復正常運作。
一、核心業務資訊遭嚴重洩漏。
二、核心業務資訊或核心資通系統遭嚴重竄改。
三、核心資通系統之運作受影響或停頓，無法於可容忍中斷時間內回復正常運作。