ACT ON THE PROMOTION OF INFORMATION SECURITY INDUSTRY

CHAPTER I GENERAL PROVISIONS

Article 1(Purpose) #

The purpose of this Act is to create infrastructure for the information security industry by providing for matters necessary for promoting the information security industry; and to contribute to creating the environment in which people can use information and communications safely, and to soundly developing the national economy by strengthening the competitiveness of the information security industry.

Article 2(Definitions) #

(1) The terms used in this Act are defined as follows:

1. The term "information security" means establishing managerial, technological and physical means (hereinafter referred to as "information security system") for the following activities:

(a) Preventing the destruction, modification, leakage, etc., of information which may occur while collecting, processing, storing, searching for, transmitting and receiving information, and recovering information;

(b) Responding to accidents, disasters, crimes, etc. by utilizing security technology, such as cryptography, authentication, identification, and surveillance, or operating related equipment and facilities safely;

2. The term "information security industry" means the industry that develops, manufactures or distributes technology for information security (hereinafter referred to as "information security technology") and products to which information security technology applies (hereinafter referred to as "information security products"); or provides services related thereto (hereinafter referred to as "information security services");

3. The term "information security enterprise" means a person who conducts economic activities related to the information security industry (hereinafter referred to as "information security business");

4. The term "user" means a person who uses information security technology, information security products and information security services (hereinafter referred to as "information security technology, etc.") provided by an information security enterprise;

5. The term "public institutions" means the following institutions:

(a) Corporations, organizations or institutions established under Article 4 of the Act on the Management of Public Institutions;

ACT ON THE PROMOTION OF INFORMATION SECURITY INDUSTRY

Article 1(Purpose) #

Article 2(Definitions) #

Article 3(Responsibility of the State and local governments) #

Article 4(Relationship to other statutes) #

Article 5(Formulation of plan for promotion of information security industry) #

Article 6(Provision of information on purchase demand) #

Article 7(Contract, etc. for establishment of information security system of public institutions) #

Article 8(Approval of subcontracting) #

Article 9(Defects warranty for information security system) #

Article 10(Price for information security products and information security services) #

Article 11(Acceleration of convergence of information security industry) #

Article 12(Support for evaluation of level of information security preparedness) #

Article 13(Information security disclosure) #

Article 14(Implementation of technological development and standardization) #

Article 15(Training for professionals) #

Article 16(Promotion of international cooperation) #

Article 17(Support for performance assessment) #

Article 18(Designation of excellent information security technology, etc.) #

Article 19(Designation of exemplary information security enterprises) #

Article 20(Provision of loans) #

Article 21(Support for exportation) #

Article 22(Taxation support) #

Article 23(Designation and management of enterprises specializing in information security services) #

Article 24(Incorporation of Korea Information Security Industry Association) #

Article 25(Establishment of dispute mediation committee) #

Article 26(Mediation to settle disputes) #

Article 27(Exclusion, challenge and voluntary refrainment of members) #

Article 28(Request for data) #

Article 29(Validity of mediation) #

Article 30(Refusal and suspension of mediation) #

Article 31(Expenses incurred in mediating dispute) #

Article 32(Confidentiality) #

Article 33(Procedures for mediation) #

Article 34(Measures to protect users) #

Article 35(Withdrawal of application) #

Article 36(Formulation of guidelines for protection of users) #

Article 37(Information security measures of public institutions) #

Article 38(Entrustment of duties) #

Article 39(Deemed public officials for purposes of penalty provisions) #

Article 40(Penalty provisions) #

Article 41(Administrative fines) #