Telecommunications Management Act Article 15
Telecommunications enterprises who have established a PSTN using telecommunications resources or other telecommunications enterprises announced by the competent authority shall draw up an info-communications security maintenance plan and implement it accordingly.The plan as mentioned in the preceding paragraph shall include the following matters:1. The info-communications security management scope and classification methods.2. Info-communications security management compliant verification measures.3. Implementation measures of info-communications security management plan.4. Joint defense and response measures for info-communications security incidents.5. Other measures that may facilitate the management of info-communications security as designated by the competent authority.Rules governing the considering factors for the competent authority's determination of the telecommunications enterprises to be announced as prescribed in Paragraph 1; scope of info-communications security management as prescribed in the preceding paragraph; classification methods; verification standards and procedures; joint defense and response reporting operations; and other related matters shall be promulgated by the competent authority.
中文原文 電信管理法第15條
設置使用電信資源之公眾電信網路之電信事業或其他經主管機關公告之電信事業，應訂定資通安全維護計畫，並依該計畫實施。
前項計畫應包含下列事項：
一、資通安全管理範圍及分級處理方式。
二、符合資通安全管理驗證措施。
三、資通安全維護計畫執行方式。
四、資通安全事件聯防應變措施。
五、其他經主管機關指定有助於資通安全之管理措施。
第一項主管機關公告電信事業之考量因素、前項資通安全管理範圍、分級、驗證基準、程序、聯防應變通報作業及其他應遵行事項之辦法，由主管機關定之。
前項計畫應包含下列事項：
一、資通安全管理範圍及分級處理方式。
二、符合資通安全管理驗證措施。
三、資通安全維護計畫執行方式。
四、資通安全事件聯防應變措施。
五、其他經主管機關指定有助於資通安全之管理措施。
第一項主管機關公告電信事業之考量因素、前項資通安全管理範圍、分級、驗證基準、程序、聯防應變通報作業及其他應遵行事項之辦法，由主管機關定之。