When it comes to the public, the MSIT has promoted 10 basic rules for securing information to raise awareness of internet users on information protection. The rules show useful steps to prevent ICT incidents: setting the passwords, using vaccine programs, and deleting emails from unknown users. The Ministry of Education has also developed learning programs on ICT security and applied to school curriculum from elementary to secondary schools. Through these educational tools, users can understand the cyber ethics and contribute to a healthy culture of cybersecurity globally. (Norm 8) States should respond to appropriate requests for assistance by another State whose critical infrastructure is subject to malicious ICT acts. States should also respond to appropriate requests to mitigate malicious ICT activity aimed at the critical infrastructure of another State emanating from their territory, taking into account due regard for sovereignty; ㆍCERT Cooperation The KrCERT/CC has cooperated with international CERTs, including Asia Pacific Computer Emergency Response Team (APCERT) by sharing information on cyber threats. To promote CERT cooperation, the KISA has entered into several MOUs with partner countries, thereby establishing the points of contact with 10 countries for swift ICT incident responses. Since joining as a member of the Global Forum of Incident Response and Security Teams (FIRST) in 2006, the KrCERT/CC has shared its case studies of ICT incidents and collected information on hacking incidents in Korea from other global CERTs and security firms at the annual conferences. As such, the ROK is willing to respond to appropriate requests for assistance by another State whose critical infrastructure is subject to malicious ICT acts. ㆍEstablishment of the point of contact (POC) The ROK acknowledges that international cooperation is necessary to respond to cyber threats, which are borderless and transnational in nature. To facilitate its cooperation, the proper channel should be established in advance to exchange requests and responses from partner countries. The ROK currently participates in points of contact directory, voluntarily submitted by ARF Participants, and, furthermore, convenes bilateral and trilateral cyber policy consultations to update points of contact among relevant departments and agencies on a regular basis. 8 / 10