Regulations of Special Non-official Agencies' Cyber Security Management by National Communications Commission Article 2
The cyber security maintenance plan of the special non-official agency (hereinafter referred to as the special non-official agency), regulated by the National Communications Commission (hereinafter referred to as the Commission), shall include the following items, in addition to the provisions of Paragraph 1, Article 6 of the Enforcement Rules of the Act:I. Plan for the establishment and implementation of the cyber security detection and protection, unless otherwise deemed exempt from submitting the establishment and implementation plan by the Commission.II. Measures to be undertaken with regards to security protection of compiled, stored, processed and use of user data when implementing the plan specified in the preceding subparagraph.III. The plan of implementation that has been verified as cyber security management.The special non-official agency shall, in accordance with the provisions of Paragraph 3, Article 16 or Paragraph 2, Article 17 of the Act, provide the implementation of the cyber security maintenance plan. It shall include the implementation results and related explanation specified in the subparagraphs of the preceding paragraph, in addition to the provisions of Paragraph 2, Article 6 of the Enforcement Rules of the Act.
中文原文 國家通訊傳播委員會所管特定非公務機關資通安全管理作業辦法第2條
國家通訊傳播委員會（以下簡稱本會）所管特定非公務機關（以下簡稱特定非公務機關）之資通安全維護計畫，除依本法施行細則第六條第一項規定外，並應包含下列事項：
一、資通安全偵測與防護之建置及執行方案。
但經本會認定得免包含資通安全偵測之建置及執行方案者，不在此限。
二、執行前款方案所蒐集、儲存、處理及利用使用者資料之安全保護措施。
三、通過資通安全管理驗證之執行方案。
特定非公務機關依本法第十六條第三項或第十七條第二項規定提出資通安全維護計畫實施情形，除依本法施行細則第六條第二項規定外，並應包括前項各款之執行成果及相關說明。
一、資通安全偵測與防護之建置及執行方案。
但經本會認定得免包含資通安全偵測之建置及執行方案者，不在此限。
二、執行前款方案所蒐集、儲存、處理及利用使用者資料之安全保護措施。
三、通過資通安全管理驗證之執行方案。
特定非公務機關依本法第十六條第三項或第十七條第二項規定提出資通安全維護計畫實施情形，除依本法施行細則第六條第二項規定外，並應包括前項各款之執行成果及相關說明。