Ministry of Science and ICT Holds Briefing on Revised Cloud Computing Notification

[Asia Economy Reporter Oh Su-yeon] The Ministry of Science and ICT and the Korea Internet & Security Agency (KISA) announced on the 8th that they will hold a briefing session on the amendment of the "Standards for Information Protection of Cloud Computing Services," including the designation of new cloud security certification evaluation agencies and the imposition of certification fees, at the Gongganmoa meeting room in Seoul Station on the 14th.

The "Act on the Development of Cloud Computing and Protection of Users," scheduled to be enforced in January next year, has elevated the cloud security certification system, which was previously operated based on existing notices, to a legal statute, thereby clarifying its legal basis.

Accordingly, the amendment of the "Enforcement Decree of the Act on the Development of Cloud Computing and Protection of Users" and the "Standards for Information Protection of Cloud Services" (notice) stipulates specific standards and procedures regarding the designation criteria for certification and evaluation agencies delegated by law, certification evaluation fees, and other related matters.

At the briefing session, major changes due to the amendment of the notice, such as plans for designating cloud security certification evaluation agencies and the imposition and support plans for certification evaluation fees, will be explained. Additionally, improvement plans for the certification evaluation methods (such as change evaluations) that companies have complained about during the existing security certification process will also be introduced.

The Ministry of Science and ICT plans to reflect various opinions gathered on the day in the final amendment draft of the notice, and after undergoing regulatory review by the Office for Government Policy Coordination and examination by the Ministry of Government Legislation, it will be promulgated following the enforcement of the law next year.

Kim Jeong-sam, Director of Information Protection Network Policy at the Ministry of Science and ICT, stated, "This amendment to the cloud security certification notice is significant in that it establishes a legal basis for the operation procedures of the system and alleviates difficulties faced by businesses in certification evaluations through the designation of multiple evaluation agencies." He added, "We will continue to actively incorporate various opinions from the field to establish a safe cloud usage environment and formulate policies to revitalize the industry."