공급망 보안 강화를 위한 관리 체계 정립에 관한 연구
A Study on the Establishment of a Management System for Reinforcing Supply Chain Security
1
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
지능정보기술의 발전은 공급망 전체에 대한 자동화(automation)와 연결성(connectivity)을 강화시켰지만, 다른 한편으로 새로운 위험도 증가시키고 있다. 이에 본 연구는 한국의 공급망 관리를 강화하기 위한 체계와 정책방안을 제시하고자 한다. 이를 위하여 사이버 보안 차원에서 요구되는 공급망 관리 핵심 요소를 도출하고 공급망 사이버보안 프레임워크(SCCSM Framework)를 설정하였다. 그리고 프레임워크(SCCSM Framework)에 기반을 두고 주요국의 공급망 보안 관리 항목을 비교·분석하여 공급망 사이버 보안 관리 체계를 제시하였다.
Abstract
Advances in intelligent information technology have strengthened automation and connectivity throughout the supply chain, but new risks have also increased. Therefore, this study aims to present a system and policy plan to strengthen Korea's supply chain management. To this end, core elements of supply chain management required in the aspect of cyber security were derived and the supply chain cyber security framework (SCCSM Framework) was established. Based on the framework (SCCSM Framework), the supply chain cyber security management system was presented by comparing and analyzing supply chain security management items of major countries.
참고문헌 (27)
- Communication Security Establishment, "Technology Supply Chain Guidelines(TSCG)", ~ (2010)
- Chul Gu, Jin, "An Exploratory Study on Collaborative ICT Supply Chain Security", pp.2017
- CSRC, "NIST is pleased to announce the release of NIST SP 800-161", Supply Chain Risk Management Practices for Federal Information Systems and Orga nizations, ~ (2015)
- Douglas M. Lambert, "Issues in Supply Chain Management", Industrial Marketing Management, 29(1), pp.65~83 (2000)
- Douglas M. Lambert, "Supply Chain Management : Implementation Issues and Research Opportunities", The International Journal of Logistics Management, 9(2), pp.1~20 (1998)
- Dong Koo, Yeoh, "A Study on applying and improvement Supply Chain Management through on the Korean auto parts supplier", pp.2011
- Dong Won, Kim, "Automotive-Soft ware& Supply Chain Assurance(A-SSCA)", Korea Institute of Information Security and Cryptology, Review of KIISC, 25(1), pp.39~46 (2015)
- 김동원, "자동차 공급망 위험관리(A-SCRM) 방안 연구", 정보보호학회논문지, 25(4), pp.793~805 (2015), 한국정보보호학회[DOI]
- Hyun Ho, Kim., "A Study on Nuclear Security System for Digital Control System", pp.2018
- ISO, "ISO", IEC 27001:2013, 2013
- ISO, "ISO", IEC 27036-1:2014, 2014
- Jae Young, Choi, "SCOR Model-based Supply Chain Performance Evaluation : A Case Study on the Global Automobile Industry", pp.2008
- Jonathan D. Linton, "The challenge of cyber supply chain security to research and practice – An introduction", Technovation, 34(7), pp.339~341 (2014)
- KISA, "Information Security Management System(K -ISMS)", ~ (2019)
- Lawrence V. Snyder, "Fundamentals of Supply Chain Theory", ~ (2011)
- Mark Wolden, "The effectiveness of COBIT 5 Information Security Framework for reducing Cyber Attacks on Suppl y Chain Management System", IFAC-Papers OnLine, 48(3), pp.1846~1852 (2015)
- Marjorie Windelberg, "Objectives for managing cyber supply chainrisk", International Journal of Critical Infrastructure Protection, 12, pp.4~11 (2016)
- NCSC, "Supply Chain Security Guideline", ~ (2018)
- METI, "Japan Cyber Physical Security Framework", ~ (2019)
- NISC, "外部委託等における情報セキュリティ上のサプライチェーン・リスク対応のための仕様書策定手引書", ~ (2016)
- NIST, "Cybersecurity Framework version 1.1", ~ (2017)
- NIST, "NIST Special Publication 800-161 (Supply Chain Risk Management Practices for Federal Information Systems and Organizations)", ~ (2015)
- Stair, Ralph, "Principles of Management Information System", pp.509~ (2005), Bubyoungsa
- Sandor Boyson, "Cyber supply chain risk manage ment : Revolutionizing the strategic control of critical IT systems", Technovation, 34(7), pp.342~353 (2014)
- 이상근, "지능형 전력망 도입과 사이버보안 전략", 정보보호학회논문지, 21(5), pp.95~108 (2011), 한국정보보호학회
- Soo Min, Lim, "Cyber Security Regulatory Trends of Overseas Nuclear Digital Asset Supply Chain", Korea Institute of Info rmation Security and Cryptology, Review of KIISC, 26(1), pp.54~60 (2016)
- Tianbo Lu, "Next Big Thing in Big Data : The Security of the ICT Supply Chain", 2013International Conference on Social Computing, pp.1066~1073 (2013)