(Unofficial Translation)
No. 136 Chapter 69 Kor
Government Gazette
27 May 2019
government, state enterprises, the legislative institution, the judicial institution, independent
institutions, public agency, and other government agencies;
"Code of Practice" shall mean any regulations or rules determined by the Cybersecurity
Regulating Committee;
"Cybersecurity Incident" shall mean an incident caused by any action or unlawful
undertaking committed through a computer or computer system which may damage or affect
Cybersecurity or cybersecurity of a computer, computer data, computer system, or other data
related to the computer system;
"Cybersecurity Solution" shall mean the act of solving a cybersecurity issue by using
personnel, process, and technology through a computer, computer system, computer program, or
any service related to a computer, to create confidence and enhance cybersecurity of the
computer, computer data, computer system, or other data related to the computer system;
"Critical Information Infrastructure" shall mean the computer or computer system that the
Government Agency or private organization uses in their operations which relate to maintaining
national security, public security, national economic security, or infrastructures in the public
interest;
"Organization of Critical Information Infrastructure" shall mean a Government Agency
or private organization who has a mission of or provides a Critical Information Infrastructure
service;
“Supervising or Regulating Organization” shall mean a Government Agency or private
organization or a person that is appointed by law to have the duty and power to supervise or
regulate the operations of a Government Agency or Organization of Critical Information
Infrastructure;
"Committee" shall mean the National Cybersecurity Committee;
"Competent Official" shall mean a person appointed by the Minister for the execution of
this Act;
"Secretary-General" shall mean the secretary-general of the National Cybersecurity
Committee;
"Office" shall mean the Office of the National Cybersecurity Committee;
“Minister” shall mean the Minister who is in charge of this Act.
Section 4
The Prime Minister shall be in charge of this Act and shall have the
power to issue notifications related hereto and appoint the Competent Official for execution of
this Act.
Notifications, shall come into force upon its publication in the Government Gazette.
Chapter 1
Committee
Part 1
National Cybersecurity Committee
Section 5
There shall be a committee named the "National Cyber Security
Committee". The English name shall be "National Cyber Security Committee" abbreviated as
"NCSC." The NCSC shall be comprised of:
(1) the Prime Minister as a chairperson;
(2) directors by position, comprising the Minister of Defence, Minister of Digital
Economy and Society, Permanent Secretary of the Ministry of Finance, Permanent
Secretary of the Ministry of Justice, , Commissioner-General of the National Police
2