Nation rolls out emergency cybersecurity plan

China released an emergency response plan for internet security incidents on Tuesday.

The plan was formulated and released by the Office of the Central Leading Group for Cyberspace Affairs, to “improve handling of cybersecurity incidents, prevent and reduce damage, protect the public interest and safeguard national security, public safety and social order”.

The plan divides cybersecurity incidents into six categories, including pernicious procedural incidents, cyberattacks and information security incidents.

It defines four levels of security warnings and response systems depending on threat conditions ranging from “general” to “extremely serious”.

In the “extremely serious” category, security incidents may “paralyze many important internet and information systems” or “cause loss or falsification of State secrets and important sensitive information, posing great threats to national security and social stability”, the plan says.

Serious incidents will trigger measures including the establishment of an emergency headquarters, 24-hour monitoring and multidepartmental coordination in handling the aftermath.

In May, China suffered from a global ransomware attack that had paralyzed online payment systems at petrol stations across China and invaded colleges to encrypt papers and other documents.

The plan implements the Cybersecurity Law adopted last year, which requires an emergency response mechanism to avoid threats.