CI sectors CI services (including procedures)(Note 1) Explanation of services (including services) name (Relevant laws) - Port transportation - Work loading and unloading cargo to and business from ships at ports based on demands of other people (Article 2 of the Port Transportation Business Act) Examples of CISs outages caused by system failures Laws and guidelines pertaining to CISs outages reports (Service maintenance levels(Note 2)) Chemical industries Credit card services - Petrochemical - Production, processing and trade of - Plant outages industries petrochemical products - Long-term suspension of product supply - Credit card settlement Credit card settlement services (Article 2, - Delay and suspension of credit card settlement services paragraph (3), items (i) and (ii) and Article services, and large-scale leakage of credit card 35-16, paragraph (2) of the Installment information Sales Act)(Note 3) Petroleum industries - Petroleum products supply services - Import, refining, distribution and sale of petroleum - Oil supply outages - Hindrance to safe operation of refineries - Safety Principles for Ensuring Information Security for the Petrochemical Sector - Information Security Guideline for the Credit CEPTOAR (*) Regulations will be specified in the basic policy for supervision based on the Installment Sales Act (deferred payment section) in the future. - Safety Guideline for Ensuring Information Security for the Petroleum Sector Note 1: Excluding services wherein IT is not at all utilized Note 2: For sectors without any specific standards concerning CISs outages, the service maintenance level is to ensure no CISs outages caused by system failures. Note 3: Under the amended Installment Sales Act (to be enforced as of the day specified by Cabinet Order within one year and six months from the date of promulgation (December 9, 2016)), Article 2, paragraph (3), items (i) and (ii) and Article 35-16, paragraph (1), item (ii) and paragraph (2) Note 4: The contents provided in Annex 2 are current as of April 2019. Where necessary, verify the latest updates on laws and regulations with the responsible ministries. 32 Annex 2: Explanation of CI Services and CI Service Outage Examples - Warehousing business - Work storing deposited goods in warehouses (Article 2 of the Warehousing Business Act)

Select target paragraph3