국내·외 정보보호 관리체계기반의 인적보안의 이론적 비교연구
A Theoretical Comparative Study of Human Resource Security Based on Korean and Int’l Information Security Management Systems
1
조회
0
다운로드
11
인용
0
참고문헌
키워드
초록
ICBM(IoT, Cloud, Bigdata, Mobile)의 다양한 융합적 환경에서 IT기술의 발전이 진화되어 기존에 없던 다양한 새로운 정보보안의 위협이 생기고 있다. 또한 주요 금융권과 정부 공공기관을 대상으로 대형 정보유출 사고가 급증하면서 인적 보안의 중요성을 강조하고 있다. 이에 체계적인 정보보호 관리체계 구축은 해킹 및 보안 침해사고 가 발생하는 경우 신속하게 대응하여, 피해 규모를 최소화 한다. 본 논문에서는 ISO27001, NIST 800-53, K-ISMS, COBIT, Cyber Security Framework등 주요 정보보호 관리체계에 나타난 인적보안 통제항목의 이론적 비교, 분석을 수행함으로써 보안사고의 주요 원인인 인적보안 문제에 관하여 효과적인 통제 방안과 시사점을 제시하였다.
Abstract
In various ICBM (IoT, Bigdata, Cloud, Mobile) IT convergence environments, IT technologies have been evolved, new information security threats have been occurred. As information security incidents in major public agencies, financial institutions and companies occurred, it was emphasized that the importance of human security was disclosed. Thus, implementing of information security management system could protect hacks and security breaches and respond quickly to accidents so it minimized the sized of loss. In this paper, comparison of human security controls shown in ISO27001, COBIT, NIST 800-53, K-ISMS, Cyber Security Framework such as the main information security management systems was analyzed, and proposed of the security implications about effective controls of human resources security issues.
참고문헌 (14)
- Y. Y. Shin, "Economic Damages Assessment for National Cyber Security Measures - Analysis of the March 20 Cyber Attack", Journal of National Intelligence Studies, 6(1), pp.129~173 (2013), KANIS
- Ministry of Science, ICT and Future Planning, "K-ICT Security SPARK", 10~ (2015)
- "Galaxy Note 7 : stating the lowest prices" (2014)[URL]
- I. H. Cha, "An Empirical Research on Developing Personnel Security Management Indicators in Information Security", Master, pp.2009
- T. K. Lee, "Prevention of Industrial Information leakage & Methods for Personnel Security", Master, pp.2011
- T. Humphreys, "How to implement an ISO", IEC 27001 information security management, 2006, pp.40~
- 강현선, "정보보안을 위한 정보보호 관리체계 및 인증체계 분석", 보안공학연구논문지, 11(6), pp.455~468 (2014), 보안공학연구지원센터[DOI]
- ISACA, "COBIT 5 A Business Framework for the Governance and Management of Enterprise IT", pp.14~ (2012), ISACA
- "Review on IT Governance based on COBIT Model" (2014)[URL]
- K. Dempsey, "Summary of NIST SP 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations", NIST, ~ (2014)
- A Study on Vulnerability Check Lists of Information Systems Security Control in Public Sector, "Y. H. Back", Audit and Inspection Research Institute, 28~ (2015)
- B. H, Bae, "Comparative Analysis and Implications of Cyber Security Strategies - the US, EU, and UK", Information Communication and Broadcasting policy, 26(21), pp.5~ (2014), KISDI
- 김성용, "정보보호 관리체계를 활용한 인적보안 통제 모델 연구", 석사, 컴퓨터정보통신공학과 감리테스팅전공, pp.2013
- "Data Leakage in North America; Major Cause is on Human Resources in the inside of Organization" (2016)[URL]