Administration Regulations of Cyber Security on Telecommunications Business Article 6

Telecommunications enterprises shall establish cyber security incident notification, handling, reporting and joint defense measures.Upon the occurrence of a cyber security incident, telecommunications enterprises shall conduct emergency response measures according to the cyber security incident notified by the competent authority; and shall report the implementation thereof to the competent authority. Relevant records shall be retained for at least six months.Response measures for telecommunications enterprises designated as the critical infrastructure provider shall be conducted in accordance with Regulations on the Notification and Response of Cyber Security Incident enacted according to Paragraph 4 of Article 18 of Cyber Security Management Act.