The organization must ensure that all approved cybersecurity policy and planning documents and test reports, including the business continuity plan, cybersecurity policy, and risk assessment/management plans, are submitted to the Cybersecurity Information System (KSIS). This submission must be completed no later than 5 working days from the document's approval date and should include the following information for each document:

1. document title
2. date of approval
3. registration number
4. any additional summary data specified for the document type (e.g., summary of risk assessment results, including identified threats, their probability, impact on operations, risk levels, and management measures)

These documents should be retained in accordance with regulatory requirements (minimum of 3 years for risk documents).