DOI QR코드

DOI QR Code

공공정보화분야 유지관리사업의 개인정보보호를 위한 SLA 지표 개발에 대한 연구

Research on the Development of SLA Indicators for Personal Information Protection of Public IT Maintenance Business

  • 이경환 (동신대학교 컴퓨터학과) ;
  • 류갑상 (동신대학교 컴퓨터학과)
  • 투고 : 2020.04.13
  • 심사 : 2020.06.20
  • 발행 : 2020.06.28

초록

공공정보화분야 유지관리 사업에서 개인정보의 고의 또는 관리 부재로 인한 유출 및 파괴, 변조 등 외부 불법사용자의 공격이 증가되고 있다. 이러한 보안 사고를 사전에 예방하고자 SLA 지표를 개발하여 정량적으로 관리하는 것이 필요하다. 본 연구는 개인정보보호 SLA 지표를 개발하여 개인정보보호 SLA 지표 정보수집 방법, 시기 등의 구체적인 안을 제시하였다. 특히, 전문가 그룹을 중심으로 온라인 설문조사를 실시한 결과 개인정보 파기 준수율, 개인정보보호 시스템 접근통제 준수율의 경우 그 중요성과 타당성 측면에서 실제 공공정보화 사업에 SLA 신규 및 개정 시 적용하여 관리하는 것이 효과가 클 것이라는 의견을 받았다. 향후, 이러한 개인정보보호를 위한 SLA 지표를 공공정보화 유지관리에 기준으로 활용함으로서 SW품질을 높이고 안전성 확보에 기여할 것이다.

In the field of public informatization maintenance business, the attacks of external illegal users such as unauthorized leakage, destruction, and alteration due to intentional or inadequate management of personal information are increasing. In order to prevent such security incidents in advance, it is necessary to develop and quantitatively manage SLA indicators. This study presents the privacy SLA indicators and suggests specific methods such as information collection method and timing of the privacy SLA indicators. In order to confirm the validity and reliability of the proposed SLA indicators, an online survey was conducted with a group of experts. As a result, it was evaluated that compliance rate of personal information destruction and compliance rate of personal information protection system would be effective when applied to new and revised SLA indicators in terms of importance and validity. In the future, using SLA indicators for personal information protection as a standard for public information maintenance will contribute to improving SW quality and securing safety.

키워드

참고문헌

  1. Harbour & Jerry L. (1997). The Basic of Performance Measurement. Quality Resource, 33-37.
  2. K. M. Kim. (2018). Research on improved SLA indicators for efficient IT outsourcing services. Master's thesis. Soongsil University Graduate School of Information Science, Seoul, 1-6.
  3. S. G. Lee. (2016). Case study on improving service level agreement indicators in ITIL. Master's thesis. Incheon University Graduate School of Information Technology, Incheon, 34-36.
  4. S. Y. Rhew, S. J. Sin & Y. Y. Kim. (2009). A study on the selection and improvement of SLA evaluation index using IT maturity model. Journal of the Korean IT Service Society, 8(4), 141-150.
  5. U. S. Kim, J. Y. Kim, I. C. Han & N. Y. Lee. (2019). Financial Cloud Services SLA Indicators Study. Korea IT Policy Management Association, 11(5), 1365-1370.
  6. S. S Park, J. R. Seo & C. S. Lim. (2004). A study on the development of SLA indicators according to the level of IT Outsourcing service needs. Korean Management Information Society, 2004(1), 811-818.
  7. J. D. Kim, H. Y. Yeam & D. H. Park. (2015). A Study on development of privacy indicators in the context of cloud service level agreement. Korea Digital Policy Association, Digital Convergence Research, 3(2), 115-120.
  8. J. G. Lee. (2019). Violation of Personal Information Protection Act and Countermeasures. KIS, 9, 25-26.
  9. J. H. Sim. (2008). A study on the development of a 6 Sigma-based SLA system introduction process_ Domestic public institution case-oriented. Master's thesis. Seoul City University Graduate School of Business, Seoul, 22-23.
  10. Y. H. Choi. (2012). Val IT-based IT service management performance indicator model for IT governance. Master's thesis. Korea University Information and Communication Engineering, Seoul, 12-13.
  11. Korea Communications Commission. (2011). Cloud SLA Guide. Seoul: Korea Communications Commission, 12-13.
  12. J. Kwak et al. (2010). Development of effective operation method of security SLA for security service. Seoul: Korea Internet & Security Agency, 144-145.
  13. T. H. Yoon. (2011). A study on the development of security SLA indicators for IT outsourcing companies. Master's thesis, Korea University Graduate School of Information Security, Seoul, 12-13.
  14. J. D. Kim, D. H. Kim & H. R. Yeam. (2015). Development of SLA indicators for cloud privacy. Journal of the Korea Digital Policy Society, 13(2), 115-120.
  15. Kaseye. (2012). Smart SLA. Privacy in Cloud Computing. 122-123.