(Unofficial Translation) No. 136 Chapter 69 Kor Government Gazette 27 May 2019 CMO shall comply with the orders of the Committee, CRC, and CMO under the duties and powers as follows: (1) manage the operation of the Office to accomplish in accordance with the mission of the Office, and with the policy and plan on Maintaining Cybersecurity, the operational plan for Maintaining Cybersecurity, the policies of the Cabinet and the Committee, and regulations, policies, resolutions and notifications of the CMO; (2) issue regulations under the policy of the Committee and CRC that are not contrary to the law, Cabinet resolutions, and the regulations, policies, resolutions, and notifications determined by the Committee and CRC; (3) be a supervisor of the officers and employees of the Office and evaluate the performances of officers and employees of the Office in accordance with the regulations of the CMO and the rules of the Office; (4) appoint the deputy Secretary-General or assistant of the Secretary-General as approved by the Committee to be an assistant in the operation of the SecretaryGeneral as assigned by the Secretary-General; (5) assign, appoint, promote, demote, deduct the salaries or wages of, execute disciplinary action against officers and employees of the Office, and remove officers and employees of the Office in accordance with the regulations determined by the CMO and the rules of the Office; (6) perform any other task as specified under the regulations, policies, resolutions, or notifications of the CMO or the CRC. For the operation of the Office in relation to external personnel, the Secretary-General shall be the representative of the Office, under the scope set forth by the Committee. The Secretary-General may assign its power to any person under the Office to perform a specific task under the regulations determined by the CMO. In case that there is no Secretary-General or the Secretary-General cannot perform his or her duties, the deputy Secretary-General in order of the seniority shall be in charge. If there is no deputy Secretary-General or the deputy Secretary-General cannot execute the duties, the Committee shall appoint an appropriate person to do so. Section 37 The accounts of the Office shall be prepared in accordance with the forms and criteria determined by the CMO, taking into account international principles and accounting standards. Section 38 The Office shall prepare and submit a financial statement and accounting report to an auditor within ninety days from end of the fiscal year. The Office of the Auditor General or the auditor authorized by the Office of the Auditor General shall approve the auditor of the Office and appraise the results of expenses and assets of the Office in each fiscal year, and shall prepare the result of the audit to be submitted to the CMO for approval. Section 39 The Office shall prepare an annual report to be submitted to the Committee within one hundred and eighty days from the end of the fiscal year, and shall disclose the annual report to the public. The annual report under paragraph one shall describe the details of balance sheets as approved by an auditor, the performance of the Office, and the outcome of the performance evaluation of the Office during the previous fiscal year. The evaluation of the Office under paragraph two shall be done by an external person who has been approved by the CMO. 11

Select target paragraph3