• Font Size:
  • S
  • M
  • L

Article NO. Content

Title:

Regulations Governing the Audit of the Implementation of Cyber Security Maintenance Plans  CH

Amended Date: 2026.01.05 
Article 9 When the audit agency conducts audit, the agency shall form an audit team composed of three to more people respectively for each audited agency, depending on the considerations under Paragraph 1 of Article 6.<br/>Informing the audit team under the preceding paragraph, the audit agency shall, taking the needs of the audit into consideration, invite representatives of government agencies or experts and scholars who have professional knowledge of cyber security policies or have professional knowledge of technologies, man-agements, law affairs required for such audit to act as members of such team, of which the number of representatives of the government agency may not be less than one-fourth of all members.<br/>The audit agency shall sign, in writing, with members of audit teams on recusal due to interest conflicts and confidentiality obligations.<br/>Where the member of audit team under Paragraph 2 has any of the following circumstances, he shall avoid himself from acting as the member of that audit team:<br/>1. He, his spouse, his relatives within the third degree, his family member, or the trustee of the prop-erty trusts of above-mentioned persons have a property or non-property interest relationship with the audited agency or the representative or the responsible person thereof.<br/>2. He, his spouse, his relatives within the third degree or his family member has employment, con-tract, appointment, agency or other similar relationship with the audited agency or the representa-tive or the responsible person in the current or the past two years.<br/>3. He has served in the current or past two years to be a consultant of the audited agency and his men-toring project is related to the audit program.<br/>4. Other circumstance that may be considered that his role as a member of the audit team might affect the impartiality of the audit result.