To import cyber information security products on the Government-prescribed list of cyber information security products subject to import permit, an enterprise shall obtain a permit for import of cyber information security products from a competent state agency.