3. The Government shall stipulate details of criteria, power, sequence and procedures to determine the security levels of information systems responsibilities for securing network information security at every level. Article 22. Duties on information system protection 1. To determine security levels of information systems 2. To assess and manage security risks to information systems. 3. To urge, supervise and examine the protection of information systems. 4. To take measures to protect information systems. 5. To comply with the reporting regime. 6. To conduct public information for raising awareness about network information security. Article 23. Measures to protect information systems 1. Issuing regulations on network information security in designing, construction, management, operation, use, and cancellation of information systems. 2. Applying technical measures in accordance with technical standards and norms of network information security to prevent, avoid of and remedy network information security incidents. 3. Inspecting and monitoring of the compliance with regulations and evaluation of effectiveness of managerial and technical measures in use. 4. Monitoring of information system security. Article 24. Monitoring security of information system 1. Monitoring security of information system is action to select subjects, tools for monitoring, collecting and analyzing information status of the monitored subjects to identify the factors that might constitute impacts on the information system; to report and warn of any act of violation of network information security or any act that might cause any network information security incident to the information system; to analyze the crucial key factors that affect the network information security status; to recommend changes in technical measures. 2. Subjects to safety status monitoring include: firewall, access control, main information route, important server, device or terminal. 4. Telecommunications companies, information technology service providers and network information security service providers shall cooperate with information system owners in monitoring of information system safety upon request of competent state bodies. Article 25. Responsibilities of information system owners 1. Information system owners shall protect information systems pursuant to regulations in Articles 22, 23 and 24 of this law. 2. Information systems owners using state budget shall perform according the responsibilities set forth in item 1 hereof and shall: a) Have plans for network information protection that are appraised by competent state bodies when the information system is established, expanded or upgraded. b) Appoint individual(s) or division(s) in charge of network information security. Article 26. National important information systems 9