• Title/Summary/Keyword: Breach

검색결과 427건 처리시간 0.026초

FAIR를 통한 개인정보 유출에 따른 기업의 손해금액 산출에 대한 연구 (FAIR-Based Loss Measurement Caused by Personal Information Breach of a Company)

  • 김정규;이경호
    • 정보보호학회논문지
    • /
    • 제27권1호
    • /
    • pp.129-145
    • /
    • 2017
  • 본 연구는 지속적으로 발생하고 있는 개인정보 유출사고에 대한 기업의 리스크와 손해금액 산출을 위해, 최신 리스크 분석방법론인 FAIR(Factor Analysis of Information Risk)를 사용하였다. FAIR를 통해서 실제 개인정보 유출 사고 기업을 예를들어, 손해금액을 분석하고 산출하는 방법론을 제시 하였다. 전문가 집단의 설문을 실시하고 AHP(Analytic Hierarchy Process) 방법론을 사용하여 손해금액 산정요소의 중요도와 적절성을 객관적으로 평가하였다, 본 연구를 통해서 개인정보보호 실무 담당자는 스스로 손해금액을 최신 리스크 평가 방법론을 통해서 산정하고 입증할 수 있다. 또한 본 연구의 손해금액 산정요소를 해당기업에 맞게 선택하여 정확한 개인정보 유출에 따른 손해금액 등 경제적 손실을 추정할 수 있으며, 사고조치 및 예방대책의 수립과 경영진에게 보고할 수 있는 객관적인 근거를 확보 할 수 있다.

국제물품매매계약에서의 교부서류에 대한 엄격일치원칙의 적용가능성 연구 (A Study on the Applicability of Strict Compliance of the Documents on the Contract for the International Sale of Goods)

  • 박남규
    • 무역상무연구
    • /
    • 제51권
    • /
    • pp.187-210
    • /
    • 2011
  • International transactions have the threat of non-payment by the buyer or non-performance by the seller. Parties tend to search for additional means of securing performance and payment beyond the mere agreement in the contract. Such security may be achieved by means of a letter of credit. When contracting parties have agreed to pay by means of a letter of credit, the buyer's bank takes upon itself the obligation to pay the purchase price when the seller tenders the documents that are stipulated in the letter of credit. The documents must comply strictly with the terms of the credit.. The documents play a crucial role in letter of credit transaction. The principles of abstraction, separability and strict compliance governing the letter of credit transaction are considered. The concept of fundamental breach of Article 25 CISG was discussed. This article examines whether a failure to deliver documents conforming to the terms of the letter of credit can constitute a fundamental breach of the sales contract as defined by Article 25 of the CISG by the seller and thereby enable the buyer to avoid the contract. For letter of credit transactions it should be accepted that the delivery of non-performing documents constitutes a fundamental breach, if the result of this breach is that the bank refuses to pay the price for the goods. On the other hand, in the interpretation of Article 25 CISG, it should be noted that if the parties have agreed to payment by means of a letter of credit, they have simultaneously agreed to apply the strict compliance principle to the delivery of documents in the sales contract. Finally the parties should ensure that inconsistency between the requirements under the documentary credit and the requirements under the contract of sale is avoided, since the buyer may be in breach of his payment obligation if the seller cannot get paid under the documentary credit when his documents conform with the contract of sale.

  • PDF

국제상사계약상불이행과 구제에 관한 비교 연구 (A Comparative Legal Study on the Non-Performance and Remedies under International Commercial Contract - Focusing on the CISG, PICC and PECL -)

  • 심종석
    • 무역상무연구
    • /
    • 제44권
    • /
    • pp.3-29
    • /
    • 2009
  • The PECL have been drawn up by an independent body of experts from each member state of the european union under a project supported by the european commission and many other organizations. Salient features of the general provisions of the PECL, freedom of contract and pecta sunk servanda, good faith and fair dealing, most of the PECL are non-mandatory. The CISG uses the term fundamental breach in various setting. The concept of fundamental breach is a milestone in its remedial provisions. Its most important role is that it constitutes the usual precondition for the contract to be avoided(Art. 49., Art. 51., Art. 64., Art. 72., Art. 73). In addition, where the goods do not conform with the contract, a fundamental breach can give rise to a requirement to deliver substitute goods. Furthermore, a fundamental breach of contract by the seller leaves the buyer with all of his remedies intact, despite the risk having passed to him(Art. 70). Basically, PECL, PICC generally follows CISG, it was similar to all the regulation's platform though the terms and content sometimes differ. For example regarding to the non-performance and remedies, in the case of non-performance, that is the PECL/PICC term analogous to breach of contract as used in the CISG. Furthermore the PECL/PICC used fundamental non-performance refered to in PECL Art. 8:103 ; PICC Art. 7.1.1. correspond generally to the concept of fundamental breach referred to in CISG Art. 25. The main significance of the fundamental non-performance, in any systems, is to empower the aggrieved party to terminate the contract. The need for uniformity and harmony in international commercial contracts can be expected to lead to growth of international commerce subject to the CISG, PICC, and PECL. It is hoped that the present editorial remarks will provide guidance to improve understanding between the contractual party of different countries in this respect and following key-words.

  • PDF

The Clinical Experience of Computed Tomographic-Guided Navigation System in C1-2 Spine Instrumentation Surgery

  • Kim, Sang-Uk;Roh, Byoung-Il;Kim, Seong-Joon;Kim, Sang-Don
    • Journal of Korean Neurosurgical Society
    • /
    • 제56권4호
    • /
    • pp.330-333
    • /
    • 2014
  • Objective : To identify the accuracy and efficiency of the computed tomographic (CT)-based navigation system on upper cervical instrumentation, particularly C1 lateral mass and C2 pedicle screw fixation compared to previous reports. Methods : Between May 2005 and March 2014, 25 patients underwent upper cervical instrumentation via a CT-based navigation system. Seven patients were excluded, while 18 patients were involved. There were 13 males and five females; resulting in four degenerative cervical diseases and 14 trauma cases. A CT-based navigation system and lateral fluoroscopy were used during the screw instrumentation procedure. Among the 58 screws inserted as C1-2 screws fixation, their precise positions were evaluated by postoperative CT scans and classified into three categories : in-pedicle, non-critical breach, and critical breach. Results : Postoperatively, the precise positions of the C1-2 screws fixation were 81.1% (47/58), and 8.6% (5/58) were of non-critical breach, while 10.3% (6/58) were of critical breach. Most (5/6, 83.3%) of the critical breaches and all of non-critical breaches were observed in the C2 pedicle screws and there was only one case of a critical breach among the C1 lateral mass screws. There were three complications (two vertebral artery occlusions and a deep wound infection), but no postoperative instrument-related neurological deteriorations were seen, even in the critical breach cases. Conclusion : Although CT-based navigation systems can result in a more precise procedure, there are still some problems at the upper cervical spine levels, where the anatomy is highly variable. Even though there were no catastrophic complications, more experience are needed for safer procedure.

하천제방붕괴 해석모형의 개발 (Development of Numerical Model to Analyze Levee Break)

  • 박재홍;한건연;안기홍
    • 한국수자원학회논문집
    • /
    • 제42권7호
    • /
    • pp.571-578
    • /
    • 2009
  • 본 연구에서는 하천의 제방붕괴시 제방의 침식 및 세굴이론에 기초한 범람 홍수량 해석, 시간에 따른 제방붕괴폭의 변화, 침수범위 및 침수위의 추정, 침수 예상 피해규모를 예측할 수 있도록 하천의 유량변화를 고려한 제방붕괴 모형을 개발코자 하였다. 하도구간에서는 홍수시 4점 음해 유한차분기법을 이용하여 하천 홍수위를 예측하며, 제방 붕괴해석을 위해서 제방침식을 고려한 토사이동방정식을 도입하여 물리적 이론에 기초한 제방붕괴 모형을 개발하였다. 제방붕괴모형과 하천해석모형을 이용하여 제방붕괴해석모형으로 통합하였고 연구모형을 실제하도 붕괴사례에 본 모형을 적용한 결과 제방붕괴 기간중의 하천수위, 파제기간, 파제폭 등의 인자들을 합리적으로 모의하고 있었고 개발된 모형이 보다 다양한 실제 하천제방 붕괴사례에 도입되어 적용성 및 정확성이 증명된다면 앞으로 정확한 제방붕괴가 발생한 도시하천의 하천수위 해석, 파제유량 계산, 홍수지도 작성 및 침수위 해석 등에 본 모형이 적용될 수 있을 것으로 판단된다.

중국계약법상 화물운송대리에서의 계약책임과 귀책원칙 (A Study on the Legal Character of Contractual Liability in Freight Agency under Chinese Contract Law)

  • 김영주
    • 무역상무연구
    • /
    • 제66권
    • /
    • pp.119-148
    • /
    • 2015
  • Generally, the liability for breach is defined as the civil liability that arises from the conduct of violation of a contract. There are two notable principles governing liability for breach that have fundamental impacts on the unified Contract Law of the People's Republic of China (hereinafter Chinese Contract Law) in the remedies. In China, during the drafting of the Contract Law, there was a great debate as to whether damages for breach of contract ought to follow the fault principle or to follow the strict liability principle. Ultimately the Chinese Contract Law follows the model of the CISG on this point, namely, it follows the strict liability principle (article 107) with an exemption cause of force majeure. Under Chinese Contract Law, it is interpreted as strict liability in principle. Strict Liability is a notion introduced into Chinese Contract Law from the Anglo-Saxon Law. The strict liability or no fault doctrine, on the contrary, allows a party to claim damages if the other party fails to fulfill his contractual obligations regardless of the fault of the failing party. Pursuant to the strict liability doctrine, if the performance of a contract is due, any non-performance will constitute a breach and the fault on the party in breach is irrelevant. This paper reviews problems of legal character or legal ground of contractual liability in Chinese contract law. Specifically, focusing on the interpretation of Chinese contract law sections and analysis of three cases related contractual liability in freight agency, the paper proposes some implications of structural features of Chinese contract law and international commercial transactions.

  • PDF

UCC상 Warranty 위반의 구제에 관한 연구 (A Study on the Remedy for Breach of Warranty under the Uniform Commercial Code)

  • 서정일
    • 한국중재학회지:중재연구
    • /
    • 제13권2호
    • /
    • pp.291-319
    • /
    • 2004
  • The seller may take a warranty with respect to the goods. If they are not as warranted, they may be held liable for the breach of warranty. Even when they has not made a warranty, the law will in some instances hold them responsible as though they had made a warranty. An express warranty is a part the basis for the sale. That is, the buyer has purchased the goods on the reasonable assumption that they were as stated by the seller. When the buyer intends to use the goods for a particular or usual purpose, as contrasted with the ordinary use for which they are customarily sold, the seller makes an implied warranty that the goods will be fit for the purpose when the buyer relies on the seller's skill or judgment to select or furnish suitable goods, and when the seller at the time of contracting knows or has reason to know the buyer's particular purpose and his reliance on the seller's judgment. A merchant seller who makes a sale of goods in which he customarily deals makes an implied warranty of merchantability. The Uniform Commercial Code expressly abolishes the requirement a privies to a limited extent by permitting a suit for breach of warranty to be brought against the seller by members of the buyer's family, his household, and his guests, with respect to personal injury sustained by them. Apart from the express provision made by the Code, there is a conflict of authority as to whether privies of contract is required in other cases, with the trend being toward the abolition of that requirement. At common law the rule was that only the parties to a transaction had my rights relating to it. Accordingly, the buyer could sue his immediate seller for breach of warranties. The rule was stated in the terms that there could be no suit for breach of warranty unless there was a privies of contract. The code expressly abolishes the requirement of privies to a limited extent by permitting a suit for breach of warranty to be bought against the seller by members of the buyer. Apart from the express provision made by the Code, there is a conflict of authority as to whether privies of contract is required in other cases, with the trend being toward the abolition of that requirement.

  • PDF

정보보안 상황에서의 도덕적 해방: 선행요인과 결과요인에 대한 연구 (Moral Disengagement in Information Security Context: A Study of Antecedents and Outcomes)

  • 임명성
    • 디지털융복합연구
    • /
    • 제11권11호
    • /
    • pp.1-13
    • /
    • 2013
  • 최근 정보보안사고의 가장 큰 문제 중 하나가 조직 내 내부인임에도 불구하고 아직까지 보안사고의 원인을 기술적 문제에만 초점을 맞추고 있다. 이에 본 연구는 도덕적 해방이론을 기반으로 조직 내부인의 보안정책 이탈의도가 무엇인지 탐색해보고자 한다. 정보보안 분야에서 조직내부인의 보안정책 이탈을 설명하기 위해 사용되는 일반화된 이론은 전무하다. 따라서 본 도덕적 이탈 이론을 기반으로 정보보안을 위한 가이드라인을 제시하고자 한다. 분석결과 보안정책인지와 인지된 처벌은 도덕적 이탈에 부정적 영향을 미치는 것으로 나타났다. 반면에 정보보안에 대한 부정적 정서는 도덕적 해방에 긍정적 영향을 미치는 것으로 나타났다. 마지막으로 도덕적 해방은 보안정책 위반 의도에 긍정적 영향을 미치는 것으로 나타났다.

개인정보 유출 시 통지.신고 프레임워크 및 가이드라인 (A Framework and Guidelines for Personal Data Breach Notification Act)

  • 이충훈;고유미;김범수
    • 정보보호학회논문지
    • /
    • 제21권5호
    • /
    • pp.169-179
    • /
    • 2011
  • 2011년 9월 시행되는 개인정보 보호법에 따르면, 개인정보처리자는 개인정보 유출에 대한 추가적인 법적 책임을 져야 한다. 특히 개인정보 유출 시, 개인정보처리자는 정보 주체에게 개인 정보가 유출된 사실을 의무적으로 통지를 하여야 한다. 본 연구에서는 미국 46개주에서 실시하고 있는 현행 유출 통지법과 기타 국가의 주요 사례를 분석하여, 유출 통지 프레임워크를 제시한다. 개인정보 유출통지 프레임워크는 (1) '통지의 대상이 되는 개인정보', (2) '통지 주체', (3) '통지 시점', (4) '통지 내용', (5) '통지 방법' 등 다섯 가지 중요 요소로 구성된다. 그리고 새로운 유출 통지 프레임워크에 기초하여, 향후 적절한 가이드라인을 수립하기 위한 방향을 제안한다.