• The Journal of the Institute of Internet, Broadcasting and Communication
• /
• v.23 no.3
• /
• pp.19-26
• /
• 2023

Critical information infrastructure designations for cloud service providers continue to spread around the world as energy, financial services, health, telecommunications, and transportation sectors move to the cloud. In addition, in the case of Ukraine, the removal of restrictions on the use of cloud for national critical facilities and the rapid transition of critical data to the cloud enabled the country to effectively respond to cyberattacks targeting Russian infrastructure. In Korea, the ISMS-P is operated to implement a systematic and comprehensive information protection management system and to improve the level of information protection and personal information protection management in organizations. Control items considering the cloud environment have been modified and added to the audit of companies. However, due to the different technical levels of clouds between domestic and global, it is not easy to obtain information on the findings of cloud providers such as Microsoft for the training of domestic certification auditors on hyperscale scale. Therefore, this paper analyzes findings in hyperscale clouds and suggests ways to improve cloud-specific control items by considering the compatibility of hyperscale environments with ISO/IEC 27001 and SOC(System and Organization Control) security international standards.

• Journal of Korea Entertainment Industry Association
• /
• v.13 no.8
• /
• pp.647-659
• /
• 2019

The purpose of this study was to examine the relationship between the awareness of health care workers on the protection of patient health information and their practice of it in an attempt to provide some information on the policy setting of health care institutions about medical information protection. As a result, the awareness of the health care workers on the protection of patient health information and their practice of it were both the best in the communication area, followed by the patient health information management area and the area of direct contact with health information. As for the variables linked to their awareness and practice of patient health information protection, the type of the health care institutions, job satisfaction, religion and the departments in which they worked were significantly related. To determine what factors affected the patient health information management area, a multiple regression analysis was carried out by selecting the area of direct contact with patient health information and the communication area as independent variables and by selecting the patient health information management area as a dependent variable. And it's found that the patient health information management area became better when the area of direct contact with the information and the communication area were better.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2009.04a
• /
• pp.1535-1538
• /
• 2009

1996년 7월 교육정보화촉진계획의 입안으로부터 시작한 교육정보화사업은 많은 긍정적인 성과를 거두고 있지만 전산망이 인터넷과 연결되면서 역기능도 점차 증가하고 있다. 전산망 관리자 및 보안전문가 없이 교사가 관리하는 학교 전산망의 경우 보안에 취약해 전산망의 정상적 운용 및 개인정보보호가 위협받고 있다. 본 연구에서는 학교전산망의 정보보안 취약점을 개선하기 위해 정보보호 현황 분석하여 개선방안을 모색해 보고자 한다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.23 no.1
• /
• pp.127-142
• /
• 2013

Since Personal Information Protection Act came into effect on September 2011, PIA(Privacy Impact Assessment) of public institutions has become obliged. Therefore, an increasing demand for PIA professionals is being expected. In domestic, however, no specialized certificates exist and therefore similar certificates have become a requirement for PIA professionals. Henceforth, however, the system based on these similar certificates is to be an obstacle to advancing PIA. Therefore, this study analyzes the sufficiency of current similar certificates compared with the PIA qualification requirements. And then, analyzes the validity of allowance as similar certificates by using this outcome of the validity. As this comparison draws a clear gap between PIA qualification and similar certificates, this paper suggest three suggestions to improve current qualification. Three suggestions are expected to contribute a qualitative improvement of the PIA industry.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2022.05a
• /
• pp.208-211
• /
• 2022

최근 COVID-19 팬데믹 시대 도래로 ICT 기술 기반의 지능화된 사회실현에 대한 관심이 높아지고 있지만, 사이버 위협의 다변화로 그 범위와 피해 또한 확대되고 있다. 특히, 개인의 민감 데이터뿐만 아니라, 산업체와 공공기관의 사이버 위험성 및 노출은 심각한 문제가 발생할 수 있다. 본 논문에서는 이러한 정보보호 분야에서의 위협행위 등을 탐지, 분석, 대응할 수 있는 교육 프로그램 개발과 전문 인력양성을 위한 사이버 레인지의 국내·외 기술 동향을 살펴보고자 한다. 마지막으로, 더욱 지능화되고 발전하는 사이버 위협으로부터 이를 방지하고 대응하기 위한 사이버 레인지의 발전 방향을 논하고자 한다.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.17 no.2
• /
• pp.416-426
• /
• 2016

This study intended to identify dental hygienists' knowledge and extent of awareness and performance of patient's personal information protection. In addition, this research was conducted to contribute to medical centers' preparation of measures to strengthen the personal information protection by identifying the factors affecting dental hygienists' extent of performance related to the patient's personal information protection. After explaining the purpose and meaning of the research to the survey participants and gaining their consent, a self-administered survey was conducted from November 7, 2014 to June 30, 2015. The data on 210 dental hygienists in Busan city and Gyeongsangnam-do province was used for analysis. As a result, in dental hygienists with more than 10 years experience, the extent of the performance was significantly high (p<.05). In positions higher than a senior manager, the extent of knowledge was high (p<.01) and the extent of performance was significantly high (p<.05). In hospitals with more than 10 to 20 workers, the extent of awareness was significantly high (p<.05). Regarding the correlation of knowledge and the extent of awareness and performance, a high level of knowledge showed a positive correlation of the extent of awareness and performance (p<.01). As a result of a survey regarding what effects dental hygienists' knowledge and extent of awareness of patient's personal information protection have on dental hygienists' extent of performance, it was found that knowledge (.231) and the extent of awareness (.212) are factors affecting the extent of performance. Therefore, to increase the extent of dental hygienists' performance of patient's personal information protection, there is a need to improve the knowledge of patient's personal information protection and change its awareness. To change the awareness of patient's personal information protection, there is a serious need to carry out education targeting dental hygienists.

• Review of Korea Contents Association
• /
• v.12 no.3
• /
• pp.39-43
• /
• 2014

• 정보보호뉴스
• /
• s.136
• /
• pp.30-33
• /
• 2009

본 기고는 기업에서 지난 6년 동안 정보보호 관련업무 실무책임자로서의 경험을 토대로 어떻게 하면 보다 더 효율적이고 안정적인 정보보호활동을 수행할 수 있을까 하는 관점에서 바람직한 CSO의 역할 모델을 정리해 본 글이다. 전혀 보안에 신경을 쓰지 않아도 보안사고가 발생하지 않으면 100점짜리 보안수준이 되는 것이고, 제아무리 보안교육과 점검을 실시하고 취약점을 개선하기 위한 다양한 보안투자를 시행하더라도 보안사고가 터지는 순간, 보안수준은 순식간에 빵점짜리로 전락한다. 때문에 필자는 종종 정보보호 책임자는 안전고리를 벗겨낸 폭탄을 가슴에 품고 언제 터질지 모르는 지뢰밭에 서있는 사람이라고 역설한 바 있다. 최근 급속한 IT기술의 발전과 극심한 개인주의 성향 등으로 그 어느 때보다 보안사고의 위험성과 피해규모가 크게 증대되고 있으며, 이에 따라 기업에서 정보보호 업무 수행부서의 역할과 책임범위 역시 과거와 달리 매우 광범위하게 확장되고 있는 실정이다. 특히 우리나라는 90년대 말 IMF 당시 구조조정의 여파로 중국을 비롯한 해외 경쟁회사로 국내 기술자들이 이직함으로써 핵심 산업기술의 유출이라는 피해를 경험한 바 있다. 그런데 최근 미국에서 시작된 세계경기의 위축으로 또 한 차례의 보안사고 위험성에 크게 노출되어 있는 상황이다. 각 국의 문화 및 산업의 다양성만큼이나 수많은 위험성이 산재하고 있는 현대 사회에서 바람직한 CSO가 되기 위한 몇 가지 착안사항들에 대하여 논해 보고자 한다.

• Journal of Korea Society of Industrial Information Systems
• /
• v.24 no.4
• /
• pp.79-98
• /
• 2019

In this paper, the security behaviors and attitudes related with the personal information of teenagers were investigated using empirical data based on rational behavior theory and protection motivation theory. An experiment for teenagers was conducted on Excel and the statistical packages (i.e., SPSS 21.0 and SmartPLS2.0.M3) to see how self-efficiency, security attitude, security intention and individual innovation affect their security behaviors. The experimental results showed that the security behaviors and attitudes of teenagers between internet and information devices are closely related, and the social influences can affect personal self-efficacy and security attitudes. Finally, we can know that teenagers should recognize the importance of security and protect their personal information safely through continuous education and training so that they can be linked to security behaviors.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2018.01a
• /
• pp.57-58
• /
• 2018

본 연구에서는 북한이탈주민 남한사회 정착을 위한 정책 방안을 모색하여 정책의 기초 자료 활용과 시사점의 제공에 목적을 두고자 하였다. 이를 위해 기존의 문헌연구와 통계자료를 활용하여 인과모형을 설정하였다. 연구결과 먼저, 불안한 신변을 위해 개인의 정보 보호가 이루어 져야 한다. 둘째, 심리적 문제 해결과 이를 통한 정서적 안정이 마련되어져야 한다. 셋째, 국적에 관한 문제를 제도적으로 명확히 하여야 한다. 넷째, 경제적 문제 해결을 위한 현실적인 서비스 지원 개선책이 마련되어야 한다. 다섯째, 국가나 지방자치단체의 적극적인 인식의 개선 노력과 시민교육을 통한 문화적 차이를 해소할 수 있는 공동체 교육이 이루어져야 한다.