(Norm 6) A State should not conduct or knowingly support ICT activity contrary to its obligations under international law that intentionally damages critical infrastructure or otherwise impairs the use and operation of critical infrastructure to provide services to the public; The ROK does not conduct or knowingly support ICT activity contrary to its obligations under international law that intentionally damages critical infrastructure or otherwise impairs the use and operation of critical infrastructure available for use by the public. The ROK has consistently expressed this commitment with public statements at the regional and international forums. (Norm 7) States should take appropriate measures to protect their critical infrastructure from ICT threats, taking into account General Assembly resolution 58/199 on the creation of a global culture of cybersecurity and the protection of critical information infrastructure, and other relevant resolution; ㆍLegal Framework The ROK established the Act on Protection of Information and Communications Infrastructure in 2009. The purpose of the Act is to operate main information and communications infrastructure in a stable manner by formulating and implementing measures that concert to the protection of such infrastructure, in preparation for intrusion by electronic means, thereby contributing to the safety of the nation and the stability of the life of people. ㆍDesignation and protection of critical ICT infrastructure In accordance with the aforementioned Act, the ROK has selected and designated facilities as critical ICT infrastructure in each sector. Many resources have been invested to protect 11 main sectors so far, including electronics, transportation, finances, and water purification. The list of main sectors is to be updated. The Committee for Protection of Information and Communications Infrastructure is annually convened to review and monitor the protective measures for around 400 critical ICT infrastructure facilities. ㆍAwareness raising efforts The ROK believes the awareness raising efforts to be crucial to prevent cyber threats against critical infrastructures. In this regard, the ROK declared the second Wednesday of July each year as “Information Protection Day” and its month as “Information Protection Month” in 2012. Information Protection Day seeks to draw people’s attention of the threats related to identity theft and cyberattacks. In July, multiple events such as the International Information Protection Conference and the Job Fair for Information Protection are regularly organized. 7 / 10