Stakeholder Responsibilities during normal circumstances ○ Cabinet Secretariat (Situations Response Management) ○ Cabinet Secretariat (NISC) & Crisis The Cabinet Secretariat shares information on CI-related incidents with NISC. NISC shares information on system failures mutually with responsible ministries for CI, cybersecurity related ministries, crisis management ministries, disaster prevention related ministries, cybersecurity related agencies, and cyberspacerelated operators, etc. Responsibilities during a CISs crisis STAKEHOLDER IN 63 EACH Responsible ministries for CIP provide information on system failures received from CI operators under jurisdiction to In addition to fulfilling responsibilities during normal ○ Responsible ministries for CI NISC and relevant CEPTOARs as needed. They also provide circumstances, responsible ministries for CI cooperate with the information on system failures received from NISC to relevant CISs crisis response system as necessary. CEPTOARs. The CEPTOAR council is an independent body, not ranked below other agencies, including government organizations. In addition to fulfilling responsibilities during normal Cooperation is carried out based on independent decisions by circumstances, the CEPTOAR council constructs a CISs crisis ○ CEPTOAR council each CEPTOAR. response structure as necessary and collaborates with Each CEPTOAR actively participates based on independent CEPTOARs and other related organizations. decisions and carries out a wide scope of information sharing aimed at CI operator service maintenance and recovery. The CEPTOAR secretariat collaborates with responsible In addition to fulfilling responsibilities during normal ministries for CI, crisis management ministries, disaster circumstances, the CEPTOAR secretariat constructs a CISs ○ CEPTOAR secretariat prevention related ministries, cybersecurity related agencies, crisis response system as necessary and collaborates with the the CEPTOAR council and CI operators, and mutually shares Cabinet Secretariat and other related organizations. information on system failures. CI operators share information on system failures within respective CEPTOARs as necessary and provide such In addition to fulfilling responsibilities during normal information to responsible ministries for CI based on the circumstances, CI operators construct a CISs crisis response ○ CI operators "ATTACHMENT: INFORMATION SHARING TO NISC system as necessary and collaborate with the Cabinet AND INFORMATION SHARING FROM NISC," and when Secretariat and other related organizations. there are any criminal damages, also make a report to relevant crisis management ministries based on independent decisions. * In the event of a CISs crisis due to a disaster or terror attack, etc., relevant ministries should collect and share information in accordance with "Regarding the Government Initial Response System for Emergencies" (November 21, 2003, Cabinet resolution). OF In addition to fulfilling responsibilities during normal circumstances, the Cabinet Secretariat collects information on damage and responses provided by crisis management ministries and disaster prevention related ministries, integrally with NISC, and mutually shares information with NISC. Integrated with the Cabinet Secretariat responsible for situations response and crisis management, NISC shares information on system failures mutually with responsible ministries for CI, cybersecurity related ministries, crisis management ministries, disaster prevention related ministries, cybersecurity related agencies, and cyberspace-related operators, etc. ANNEX 4-2. RESPONSIBILITIES INFORMATION SHARING SYSTEM ANNEX 4-2. RESPONSIBILITIES OF EACH STAKEHOLDER IN INFORMATION SHARING SYSTEM