Validity Period Shortened to 1.5~2 Months... Issuance of 2-Year Validity Certificates
Support for Consulting and Market Development
[Asia Economy Reporter Oh Su-yeon] A pathway has opened for new technologies and convergence products, which previously could not enter the public sector due to the lack of applicable standards in existing certification systems, to enter the public market.
The Ministry of Science and ICT held a press briefing on the 22nd to introduce the Rapid Confirmation System.
The government introduced the Rapid Confirmation System on the 31st of last month to promote the entry of new technologies and convergence products without evaluation standards in existing certification systems into the public market. They plan to actively promote the discovery of new technologies by holding a Rapid Confirmation System conference on the 24th.
Previously, except for about 20 existing information security products, new technologies and convergence products without security certification standards had to develop new standards and undergo evaluation for public adoption. This process took considerable time, causing difficulties for companies and making it hard to respond promptly to rapidly changing cyber threats.
Accordingly, after meetings chaired by the Prime Minister in June and an issue review coordination meeting in August, related notifications were revised and implemented on October 31st following stakeholder consultations.
Products that cannot be evaluated under existing certification systems such as CC certification, security function confirmation, and performance evaluation due to the absence of national security requirements or national protection profiles are included in the Rapid Confirmation System.
For example, an intelligent integrated security solution based on big data analysis is included in the Rapid Confirmation System. However, DDoS response equipment or source code security weakness analysis tools, which can obtain CC certification, are excluded from the Rapid Confirmation System.
With the introduction of the Rapid Confirmation System, the procedure is significantly shortened to about 1.5 to 2 months. After reviewing whether the product falls under CC certification, security function confirmation, or performance evaluation, product security inspection and function testing are conducted by designated and registered institutions based on laws and regulations. If the product has obtained the Korea Information and Communication Technology Association (TTA) Software Quality Certification (GS), the function test is exempted. Upon application for rapid confirmation, the review committee examines the product over 4 to 6 weeks, and if the results are appropriate, a Rapid Confirmation Certificate valid for 2 years is issued.
If standards are not established within the 2-year validity period, an extension of 2 years is possible after confirming the vulnerability inspection results. Once new evaluation standards are established, the Rapid Confirmation Certificate cannot be extended.
Through the introduction of the Rapid Confirmation System for information security products, the public sector can respond to new security threats. The industry expects that the competitiveness of the information security industry will be strengthened by promoting competition in new technology development, allowing startups to enter the public market.
Kim Jeong-sam, Director of Information Security Network Policy at the Ministry of Science and ICT, said, "Only products with existing evaluation standards have been introduced, and innovative products without evaluation standards have been delayed in adoption, creating a gap in quickly responding to cyber threats. The industry also tends to develop only products with existing certifications comfortably, limiting innovation. Although no company has yet received rapid confirmation, I understand many companies are preparing for it."
Private Technology’s Private Connect is a data flow-based zero-trust communication control solution that allows safe access to cloud, intranet, or systems anytime and anywhere. It is a segment encryption product line distinct from virtual private networks (VPNs), which can obtain CC certification, and other Software-Defined Perimeter (SDP) products.
Kindsoft’s Kind Logvisor is a new type of innovative product. It is a blockchain-based multi-layer PC login security solution capable of multi-factor authentication, multi-user access management, real-time abnormal PC login detection, and database (DB) tampering prevention. While existing product types include operational control access control and document encryption, there is no multi-login product, making it subject to the Rapid Confirmation System.
Kim Sun-mi, team leader at the Korea Internet & Security Agency (KISA), said, "There have been inquiries from more than ten companies. Although many companies have developed products according to existing product categories, there are not many new technologies yet, but three out of ten companies are preparing for the Rapid Confirmation System."
The government plans to provide consulting and financial support for pre-preparation such as vulnerability inspections, software (SW) security weakness diagnosis, and function testing when applying for the Rapid Confirmation System.
They will also assist in market development. In government support projects such as designation of excellent information security technologies, Rapid Confirmation products will receive additional points or be included in the information security product supply pool. A separate track will be prepared for Rapid Confirmation products when selecting companies for overseas business consultation meetings, and promotion such as awarding the Korea Information Security Innovation Award will be supported.
Director Kim said, "The certification process required significant funds and time, acting as an obstacle to startup growth. Startups are expected to greatly benefit from the Rapid Confirmation System. We will encourage many startups like catfish to emerge through various corporate support programs, consulting, and market expansion."
© The Asia Business Daily(www.asiae.co.kr). All rights reserved.
