Details of the Inquiry
What information security considerations apply when developing a new information system or upgrading an existing system?
At which stage should information security elements be considered?
Introducing some specific cases would be a great help.
When a system is developed, information security is considered from the design stage.
You need to identify which information security elements must be considered at the system design stage.
(1) Environmental factors that must be considered together with the definition of the system to be built, such as related laws
(2) The form of the development environment or infrastructure – whether to build it as a cloud system, whether to use internal systems, and so on
An example from the financial sector, where the highest level of information security requirements is considered
For example, consider a case in which a bank develops a system for a financial service or a customer-convenience service.
Banks treat the Electronic Financial Supervision Regulations under the Electronic Financial Transactions Act as their most important compliance requirement.
Under that law, banks are required to develop systems with information security elements taken into account.
(1) Internal security review
– Web: 12 vulnerability check items
– Mobile apps (Android, iOS): 17 vulnerability check items
(2) Result reporting
– Whether an electronic financial transaction occurs
– When an electronic financial transaction does not occur but information security elements must still be considered
* Business and related inquiries: T) 02-322-4688, F) 02-322-4646, E) info@wikisecurity.net