Eliminating Cybersecurity Blind Spots... Introducing Information Security Certification for Communication Equipment

Assemblyman Hong Seok-jun Introduces Amendment Bill to the Information and Communications Network Act as Main Proposer

Hong Seok-jun, a member of the Science, Technology, Information and Broadcasting Communications Committee from the People Power Party, on the 29th, took the lead in proposing a partial amendment to the "Information and Communications Network Act" to establish the basis for introducing an information protection certification system to strengthen the security of communication equipment and to mandate the use of information protection certified communication equipment by major institutions including telecommunications service providers.

According to the status of hacking reports in the private sector submitted by Hong Seok-jun from the Korea Internet & Security Agency, the number of cases increased more than twofold from 500 in 2018 to 1,142 last year. By industry affected, the information and communications sector recorded the highest number with 409 cases last year, followed by manufacturing with 245 cases, and wholesale and retail trade with 156 cases.

The current Information and Communications Network Act stipulates an information protection certification system for "information and communications network connected devices" to ensure the stability of the information and communications network and the reliability of information. "Information and communications network connected devices" refer to devices or equipment connected to information and communications networks in various fields such as home appliances, transportation, finance, medical care, and manufacturing, capable of transmitting and receiving information, including home appliances, medical devices, wall pads, and automobiles.

However, under the current information protection certification system, "communication equipment" such as switches, routers, and base station equipment are not included. Although the need to strengthen security functions for communication equipment has been raised, the current law does not operate an information protection certification system for communication equipment, leaving it in a regulatory blind spot. Accordingly, there have been calls for urgent institutional improvements to secure the security of communication equipment used by major institutions such as telecommunications service providers.

The bill led by Hong Seok-jun provides the basis for the Minister of Science and ICT to certify information protection for important communication equipment designated by Presidential Decree, and mandates that institutions designated by Presidential Decree, including telecommunications service providers, must use communication equipment that has received information protection certification.

Hong Seok-jun said, "Cyber hacking is a critical issue directly related to national security, as it can cause enormous economic damage and potentially paralyze important social systems," adding, "With ongoing cyberattacks and damages targeting private and public institutions, thorough inspection and preparation are necessary to ensure there are no vulnerabilities in cybersecurity."