事故應變及災變復原計畫
Incident Response and Disaster Recovery Plans
CA organizations shall have an Incident Response Plan and a Disaster Recovery Plan.
各憑證機構應具備事故應變計畫及災變復原計畫。
The CA SHALL document a business continuity and disaster recovery procedures designed to notify and reasonably protect Application Software Suppliers, Subscribers, and Relying Parties in the event of a disaster, security compromise, or business failure. The CA is not required to publicly disclose its business continuity plans but SHALL make its business continuity plan and security plans available to the CA’s auditors upon request. The CA SHALL annually test, review, and update these procedures.
憑證機構（Certification Authority，CA）應（SHALL）將業務持續性與災變復原程序作成文件，以便於發生災變、安全遭受危害或營運失敗時，通知並合理保護應用軟體供應商（Application Software Supplier）、用戶（Subscriber）及信賴憑證者（Relying Party）。CA 無須對外公開其業務持續性計畫，但應（SHALL）於其稽核人員要求時，提供其業務持續性計畫及安全計畫供查核。CA 應（SHALL）每年測試、審查及更新該等程序。
The business continuity plan MUST include:
業務持續性計畫（Business Continuity Plan）應（MUST）包括：
- The conditions for activating the plan,
- 計畫啟動條件，
- Emergency procedures,
- 緊急程序，
- Fallback procedures,
- 備援程序，
- Resumption procedures,
- 營運恢復程序，
- A maintenance schedule for the plan;
- 計畫之維護時程；
- Awareness and education requirements;
- 認知宣導及教育訓練要求；
- The responsibilities of the individuals;
- 相關人員之職責；
- Recovery time objective (RTO);
- 復原時間目標（Recovery Time Objective，RTO）；
- Regular testing of contingency plans.
- 應變計畫的定期演練。
- The CA’s plan to maintain or restore the CA’s business operations in a timely manner following interruption to or failure of critical business processes
- CA 於關鍵業務流程中斷或失敗後，於期限內維持或恢復其業務營運之計畫
- A requirement to store critical cryptographic materials (i.e., secure cryptographic device and activation materials) at an alternate location;
- 要求將關鍵密碼學材料（即安全密碼學裝置及啟動資料）存放於備用地點；
- What constitutes an acceptable system outage and recovery time
- 可接受的系統停機及復原時間之定義
- How frequently backup copies of essential business information and software are taken;
- 基本業務資訊與軟體的備份頻率；
- The distance of recovery facilities to the CA’s main site; and
- 復原設施與 CA 主要營運場地之間的距離；以及
- Procedures for securing its facility to the extent possible during the period of time following a disaster and prior to restoring a secure environment either at the original or a remote site.
- 災變發生後，於原始場地或遠距場地恢復安全環境前，儘可能確保其設施安全之程序。