Regulations for Administration of Mobile Broadband Businesses Article 83-2

The operator's telecommunications equipment room or internet data center shall be established with a physical isolation and be equipped with an independent entrance / exit.The access control security management systems, including all-weather intrusion alerts and video surveillance, shall be installed at the entrance / exit as described in the preceding Paragraph. The alerts and recorded videos shall be preserved for at least six months.The telecommunications equipment room or internet data center as described in Paragraph 1 shall be prohibited to access, except for those with the installation, maintenance, monitoring or other operational purposes that are deemed necessary.The operator shall set respective security management and operation rules for different telecommunications equipment rooms and / or internet data centers; the rules shall be reported to the competent authority for reference.The security management and operation rules in the preceding Paragraph shall include at least the following items:1.Division of rights and responsibilities: including the authorities related to the security maintenance zone, responsible units, staff organization and duties, and access to the telecommunications equipment room (internet data center).2.Access control management: including the management of identification (name and ID card or passport number), organization (institution), entry (exit) time, and entry (exit) purposes of staffs, subcontractors, visitors or internet data center guests who enter the telecommunications equipment room (internet data center); auditor's audit records; and objects entering (exiting) the room (center).3.Maintenance management: management of the maintenance works conducted by internal staffs or subcontractors.4.Environment management: management of fire fighting, security, electricity and relevant facilities.5.Management records: including the access management, maintenance and environment maintenance records.6.Audit operations: shall include regular and irregular audit works.The management records of Subparagraph 5 of the preceding Paragraph shall be preserved for at least six months.The competent authority, depending on operators' status of implementation, may require the operator to make amendments to their security management and operation rules for telecommunications equipment room (internet data center) of Subparagraph 4.Operators shall implement security management and operation rules for telecommunications equipment room (internet data center) of Subparagraph 4; the competent authority may send personnel to conduct audit works on a regular basis or depending on the actual needs.