ATTACHMENT: INFORMATION SHARING TO NISC AND INFORMATION SHARING FROM NISC 2. Information Sharing to NISC from CI Operators 2. Information Sharing to NISC from CI Operators 2.1 Cases requiring information sharing to NISC Of information related to system failures,11 CI operators should conduct information sharing to NISC in any of the following cases. In detail, CI operators should report events and causes identified at that time as needed and such information provided before the complete picture is identified may be fragmentary or uncertain. (i) Cases where the relevant event requires a report to responsible ministries for CI under laws and regulations (ii) Cases where stakeholders recognize the relevant event's serious impact on national life and CI services, and where the relevant CI operator considers it appropriate to share information of said event (iii) Other cases where the relevant CI operator considers it appropriate to share information on the relevant event When it is not clear whether or not any of the above is applicable, CI operators should preferably consult with responsible ministries for CI or the Cabinet Secretariat. 2.2 Framework for information sharing to NISC The procedures for information sharing from CI operators to the Cabinet Secretariat via responsible ministries for CI are as follows. (i) CI operators classify events and causes based on "ANNEX 3. CATEGORIES OF EVENTS AND CAUSES FOR INFORMATION SHARING TO NISC" and share information to responsible ministries for CI in accordance with "ANNEX 4-1. INFORMATION SHARING SYSTEM." (ii) The personnel of responsible ministries for CI appointed for each jurisdictional sector (liaison to the Cabinet Secretariat) shares the information received from the CI operators of the relevant sector to the Cabinet Secretariat. (iii) The Cabinet Secretariat appropriately manages the shared information and handles the information within the scope of information sharing permitted by data sources. (iv) When there is an urgent need, regardless of procedures (i) and (ii), CI operators immediately share information to responsible ministries for CI and make a report to the Cabinet Secretariat simultaneously. As shown in ANNEX 4-1, regarding signs or Hiyari-Hatto events or system failures for which reporting is not legally required, CI operators may share them to responsible ministries for CI and to NISC after data anonymization via the CEPTOAR secretariat. 11 Meaning information on system failures, including CISs outages, and signs and Hiyari-Hatto events 50