|
Article 10
|
The Office of the President, the National Security Council, the Five Yuans, and their directly affiliated agencies must plan and carry out cyber security exercises for itself or for its subordinate or supervisory government agencies. Within one month after completion, they must submit a report on execution and outcomes to the competent authority. The exercises must cover at least the following items:<br/>1. Social engineering exercise shall be conducted once every six months.<br/>2. The notification and response exercise of the cyber security incident shall be conducted once a year.<br/>The Office of the President, the National Security Council, and the Five Yuans and special municipalities and county/city councils shall plan and conduct the cyber security exercise operation required under the preceding paragraph.<br/>Special municipality and county (city) governments shall, in line with paragraph 1, plan and carry out cyber security exercises for itself or for its subordinate or supervisory government agencies, and the fol-lowing organizations:<br/>1. Their governed villages (townships/cities), mountain indigenous district offices of special munici-palities and the subordinate or supervisory government agencies.<br/>2. The township (town or city) representative councils mentioned above, and the representative coun-cils of mountain indigenous districts of special municipalities.
|