금융보안 리스크 기반의 IT도급 정책 연구
A Study on IT Outsourcing Policy Based on Operational Risks of Financial Industries
0
조회
0
다운로드
5
인용
0
참고문헌
키워드
초록
2011년 대형 금융 사고가 연달아 발생하자 정부는 인력, 조직, 예산을 포함한 전자금융감독 규정 전면 개정을 발표했다. 규정에 주요 내용은 전자금융거래법 대상 기업들은 전체 직원의 5%를 IT인력으로 채용하고, IT인력의 5%는 보안인력으로, 또 IT예산의 7%는 정보보호 예산으로 편성하게 하는 내용이었다. 본 연구는 전자금융감독 규정 전면 개정에 따른 금융보안 리스크 기반의 IT도급 정책 결정 방안에 대해 연구하였다. 외주인력 문제를 해결하기 위한 정책 결정Flow를 제공하고 IT 업무 분류 시 프로그램 품질 향상을 위한 개선 방안과 사례 연구를 통해 외주 인력의 효율적 운영정책을 제시하고자 한다.
Abstract
For the continuous financial incidents occurred in 2011, Korean government has announced the amendment on electronicfinance supervision regulation including human resources, organization and budget. The major part of the regulation is mainlyfocused on human resources and budget. It states that company has to employ at least 5 percent of IT staff out of total staff,and at least 5 percent of security staff in IT staff employment number. Budget for security should be at least 7 percent of totalIT budgets. This paper studies IT outsourcing policy based on operational risks of financial industries caused by amendment ofregulation. This paper provides the policy decision procedure for resolving the 3rd party problems and suggests the effectiveoperation policy to 3rd party for the program quality improvement and case studies at the IT task classification.
참고문헌 (18)
- Financial Services Commission, "Electronic financial supervision regulations general revision", ~ (2011)
- Financial Services Commission, "Electronic financial supervision regulations part revision", ~ (2012)
- Financial Services Commission, "Electronic financial supervision regulations part revision", ~ (2013)
- Financial Services Commission, "Electronic financial supervision regulations part revision", ~ (2014)
- Financial Services Commission, "Best practice standards for the protection of IT in financial industrial", ~ (2011)
- Financial Services Commission, "Best practice standards for the protection of IT in financial industrial revision version", ~ (2012)
- "The Bank Of Korea" (2014)[URL]
- "Employment and Labor Policy Report" (2011)[URL]
- Eun Jung Park, "Distinction of worker dispatch contract and Subcontractor contract : 07.01.2011 Supreme Court sentenced, 2011 du 6097 rulings", Korea Labor Law, (40), pp.316~320 (2011)
- "hkshin" (2014)[URL]
- An Empirical Study on the Improvement of Security Levels in IT Outsourcing Services, "Myung-Sub Sim", 21~22 (2013)
- "General Legal Information" (2010)[URL]
- "Gwangju District Court" (2013)[URL]
- Seung Wan Chai, "Internet infringement accident damage costs calculated model", SIS 2006-KISA symposium (2006)