Responsibility level
Also called: cyber security responsibility level
Under Taiwan's Cyber Security Management Act, the security tier, from A (highest) down to E, approved or recorded for each government agency and specific non-government agency. The level sets what must be done and how often, such as audits, vulnerability scans, security health checks and the number of dedicated security staff. An organisation meeting the criteria for more than one level is placed in the highest.
Further reading: law.moj.gov.tw
From the Security Academy
ISO/IEC 27001:2022 and CNS 27001: Implementation, Certification Timeline and Pre-Audit Self-Check
Asked to get ISO 27001? What a certificate scope covers, what changed in 2022, which Cyber Security Act levels need certification, and the 3-year audit cycle.
14 min read ·
Taiwan's Cyber Security Management Act: who must comply and what they must do
Taiwan's amended Cyber Security Management Act (in force 1 Dec 2025): who is covered, responsibility levels, audits, incident deadlines and supplier impact.
10 min read ·
Advisories that mention this term
No advisories mention this term yet.