Regulations for Administration on Fixed Network Telecommunications Business Article 50-2
Within three months upon receipt of the competent authority’s notification, the operator shall make an inventory of its telecommunication infrastructure in accordance with Annexed table 1. Operators that are deemed as having critical telecommunications infrastructures according to the inventory results shall conduct a self-assessment of critical infrastructure, and submit Annexed table 2 to 4 to the competent authority for approving the items and level.Operators that fail to specify infrastructure items in the above-mentioned appendixes shall undertake corrective action within a prescribed period of the competent authority.Within three months upon receipt of the competent authority’s approval for its critical infrastructure items and level, the operator shall complete the critical infrastructure protection plan according to the following provisions.1. Operators of level 1 critical infrastructure shall submit a report to the competent authority for approval.2. Operators of level 2 critical infrastructures shall submit a report to the competent authority for reference.3. Operators of level 3 critical infrastructure shall adopt their own control measures.The above-mentioned operators who fail to specify prerequisite details of the level 1 or level 2 critical infrastructure protection plan shall undertake corrective action within a prescribed deadline as notified by the competent authority.The operator shall conduct regular drills according to its critical infrastructure protection plan and prepare a written record. The record shall be preserved for 5 years.The competent authority may request an operator to conduct drills according to its critical infrastructure protection plan; the competent authority shall then conduct an evaluation of the performances of the operator in the drill. Where an improvement is required according to the evaluation results, the operator shall undertake corrective action within a prescribed deadline as notified by the competent authority.Annexed table 1 Assessment of Influential Factors of Critical Telecommunications Infrastructure .pdfAnnexed table 2 Basic Information of Critical Telecommunications Infrastructure.pdfAnnexed table 3 Risk Assessment of Critical Telecommunications Infrastructure .pdfAnnexed table 4 Risk Assessment of Critical Telecommunications Infrastructure and Self-Assessment of Facility Level.pdfAppendix 1 Protection Plan of Critical Telecommunications Infrastructure of _____________ (Company Name) (a reference format) .pdf