Analysis of Characteristics of IT Outsourcing for Insider Security of Enterprise (기업의 내부 인력 보안을 위한 IT 외주 용역 특성 분석)

Jiyeon Kim (김지연); Kim,Hyung Jong (김형종)

Analysis of Characteristics of IT Outsourcing for Insider Security of Enterprise

Journal of Knowledge Information Technology and Systems
Abbr : JKITS
2012, 7(1), pp.167-173
Publisher : Korea Knowledge Information Technology Society
Research Area : Interdisciplinary Studies > Interdisciplinary Research
Published : February 29, 2012

Jiyeon Kim ¹, Kim,Hyung Jong ¹

¹서울여자대학교

Accredited

ABSTRACT

As many enterprises implement an information system to manage their business, IT outsourcing that operates and manages the system is increasing. Information systems can integrate all business resources and manage business processes, which enables the outsourced employees to obtain critical information about enterprise business. Actually, a large portion of security incidents regarding information leakage of enterprises are being caused by IT outsourcing. However, there is a lack of guidelines that can be used to establish security measures for the outsourcing, because domestic and foreign information security management systems (ISMS) do not specify various types of IT outsourcing even though they provide security requirements for organizations. In this paper, we classify various types of IT outsourcing and define their characteristics considering information system’s architecture, such as the status of network isolation, IT resource type, employees’ location and their access authorization.

KEYWORDS

IT outsourcing, Enterprise Security, Information security management system (ISMS), Information leakage, Network isolation

Citation status

* References for papers published after 2023 are currently being built.

[other] 지식경제부 / 2011 / 중소기업의 기술보호를 위한 세부 보안통제실행지침서

[other] 법률지식정보시스템 / 2008 / 정보통신망 이용촉진 및 정보보호등에 관한 법률

[other] 한국정보보호진흥원 / 2004 / 정보보호관리체계 인증제도 소개

[confproc] ISO / 2006 / ISO and International Standards for Security / COPANT Seminar on Security Standards

[other] ISO/IEC / 2005 / ISO/IEC 27001: Information technology – Security techniques - Information security management systems–Requirements

[other] 한국정보보호진흥원 / 2008 / 정보보호 관리체계 개요

[journal] 장상수 / 2010 / 정보보호관리체계(ISMS) 인증심사 결함사항 분석에 관한 연구 / 정보보호학회논문지 20(1) : 31~38

[other] 한국정보보호진흥원 / 2004 / 정보보호관리체계 통제사항 가이드

[web] 행정안전부 / 국가정보통신서비스 이용제도 / http://www.mopas.go.kr.

[report] 한국정보보호진흥원 / 2009 / 정보보호 거버넌스 개념 도입을위한정보보호관리체계(ISMS)발전방안연구

KJCKorea
Journal Central

Journal of Knowledge Information Technology and Systems 2023 KCI Impact Factor : 0.89