KISA Conducts Simulated Cyberattack Response Training in Cloud Environment

[Asia Economy Reporter Lim Hye-seon] The Korea Internet & Security Agency (KISA) announced on the 10th that, together with the Ministry of Science and ICT, it will conduct a simulation exercise with 11 domestic cloud service providers by the 30th of next month to create a safe usage environment for cloud services.

With the acceleration of cloud adoption due to COVID-19, the number of companies introducing or utilizing cloud services is increasing, raising concerns about cyber threats such as security breaches and information leaks targeting cloud services.

KISA will conduct the simulation exercise based on a standard framework using a threat model for security incidents to strengthen the incident response system of domestic cloud providers. The exercise will focus on data leaks and ransomware, which are high-risk and continuously occurring incidents in cloud environments.

In this simulation exercise, the technical response system for detection and defense of security solutions (firewalls/web application firewalls, antivirus, etc.) and system logs following security incidents, as well as the managerial response system including incident detection, initial response, incident reporting, investigation and response, and follow-up measures will be examined. Subsequently, customized consulting to improve the incident response system for each participating company will be provided based on the exercise results.