17.2.If information security audits have been conducted in the time period stipulated in this law
and in accordance with international standards, such audits shall be based on to deem the obligation
stipulated in article 17.1.7 of this law as fulfilled.
17.3.Legal persons other than that stipulated in article 17.1 of this law shall exercise the following
rights and obligations:
17.3.1.abide by the common procedures on ensuring cyber security in its activities;
17.3.2.notify the relevant center against cyber-attacks and violations of cyber-attacks
and violations, and obtain assistance where necessary;
17.3.3.comply with recommendations and requirements issued by the relevant
organizations;
17.3.4.other rights and obligations stipulated by legislation.
Article 18.Citizen
18.1.Citizens shall have the following obligations in ensuring cyber security:
18.1.1.take responsibility for the cyber security of themselves and any inpiduals under
their care;
18.1.2.comply with and abide by the recommendations issued by the relevant
organization;
18.1.3.others stipulated in legislation.
18.2.In case of potential cyber-attacks or violations, citizens may immediately notify the Public
center.
Article 19.Organizations with critical information infrastructure
19.1.Organizations with critical information infrastructure shall include organizations of the
following nature of business:
19.1.1.organizations with electricity production, distribution, transmission, and monitoring
control systems;
19.1.2.organizations with clean and waste water, heating source, centralized grid, and
distribution and monitoring control systems;
19.1.3.tier two and three health organizations;
19.1.4.laboratories for research on highly contagious or infectious diseases of humans
and livestock;
19.1.5.producers of medicine, and toxic and hazardous chemicals;
19.1.6.banks and financial institutions with consolidated digital systems for payment,
settlement, and transactions;
19.1.7.operators in communications, and information technology that are natural
monopolies or exercise a dominant position;
19.1.8.organizations with air, railway, waterway, and auto-road transportation
coordination and control systems;
19.1.9.organizations that import, producers, and distributors of fuel;