정보보호 추진체계 및 거버넌스의 현황과 개선방안 ― 안전한 지능정보사회의 구축을 위한 검토 ―

This study looked at the current status of the information security implementation system and related governance in response to the necessity and the request of the countermeasure in the face of the change in the era of entry into the intelligence information society, and examined the potential problems with it. Based on this, some improvement measures were suggested. This review was largely conducted in two directions: improvement of the legal system and improvement of the organization. First of all, in terms of the legal system, this study pointed out that it is necessary to define more clearly the subject to regulation of the information security related statutes, namely, information and information security. Furthermore, this study suggested that it is necessary to construct a (partial) integrated legislative system rather than individual regulatory system currently adopted by our information law system. In addition, this study suggested that there is a need to improve the legal basis for the public sector information security implementation system in that it is constituted according to the 「National Cyber Security Management Regulations」 which is only presidential directive. Next, this study examined the proposal for the establishment of '(tentative named) Intelligence information society information security committee' as a suggestion to complement the limit of the sector-specific governance such as the current one in relation to organization of information security governance. In addition, this study examined whether a new general organization for information security such as the committee should be formed as a collegiate administrative agency. This review remains a proposal that has not yet been fully addressed. However, we can not overlook the request and necessity of new regulation and implementation of information security in the entry into the intelligence information society that we have not experienced before. In this case, a timely response is needed. We need to clarify the advantages/disadvantages and problems of the existing legal system and governance structure for information security, and then build an integrated information security implementation system and governance that can be more flexibly applied based on this.