개인정보의 관리적․기술적 보호조치 기준의 상대적 중요도에 관한 연구

As the collection and use of personal information increases, the accidents that abuse andleak personal information are continuously increasing. The nation has established new lawsand strengthened related laws for the prevention of the mass leakage of personal informationand the secondary damage due to the leaked personal information. The nation also establishedthe guidelines that need to be implemented by the institutions handling personal informationfor the safety of the personal information. For the efficient implementation of guidelinesunder the limited time and resources, it is necessary to establish the priorities between guide-lines. This paper compares the relative importance of the guidelines by AHP (Analytic Hier-archy Process) technique. We performed the analysis on two expert groups, the group ofconsultants working in information security consulting company and the group of informationsecurity staffs handling personal information directly in the company. We compared thedifferences between groups and recommended the relative importances of the guidelines.