(Norm 11) States should not conduct or knowingly support activity to harm the information systems of the authorized emergency response teams (sometimes known as computer emergency response teams or cybersecurity incident response teams) of another State. A State should not use authorized emergency response teams to engage in malicious international activity. The ROK does not conduct or knowingly support activity to harm the information systems of the authorized emergency response teams of another State. Also, the ROK does not use authorized emergency response teams to engage in malicious international activity. ㆍCERT Cooperation The ROK cooperates with international CERTs, including Asia Pacific Computer Emergency Response Team (APCERT) by sharing information on cyber threats. In 2019, the ROK participated in the APCERT Incident Handling Drill, a simulated exercise of cyberattacks in scenario, and checked the readiness of cyber threat response and its organized cooperative system. To promote CERT cooperation, the ROK has entered into several MOUs with partner countries, thereby establishing the points of contact with 10 countries for swift ICT incident response. Since joining as a member of the Global Forum of Incident Response and Security Teams (FIRST), the ROK has shared its case studies of ICT incidents and collected information on hacking incidents in Korea from other global CERTs and security firms at the annual conferences. 10 / 10