“ A critical infrastructure provider shall satisfy the requirements of the cyber security responsibility level , and take into account the category, quantity and attribute of the informationreserved or processed, along with the scale and attribute of the information and communication system, to stipulate, amend and implement the cyber security maintenance plan. A critical infrastructure providershall submit to the central authority in charge of relevant industry about the implementation of the cyber security maintenanceplan. ”