The IoT Security Certification System Research Group Holds Its First Meeting
Discussion on improvements to the certification system and ways to activate it


On May 29, the Ministry of Science and ICT formed a research team to improve and activate the IoT security certification system and held its first meeting.

The research team consists of 10 people including experts from academia, industry, research, and legal circles related to IoT security, as well as the Ministry of Science and ICT and the Korea Internet & Security Agency. They will discuss ways to develop the IoT security certification system through ▲ reviewing domestic and international trends in systems and standardization, ▲ reviewing improvements such as the scope of IoT devices, certification targets, and grade types, and ▲ activating measures such as linking domestic and international mutual recognition and standardization and making certification mandatory.

In addition, as the amendment to the Act on Promotion of Information and Communications Network Utilization and Information Protection (Information and Communications Network Act), including the establishment of a basis for an IoT security certification system, passed the 378th plenary session of the National Assembly (May 20), a legal working group (8 members) was formed and is operating to prepare lower-level laws.

The working group will discuss the following: △(Enforcement Decree) the scope of information and communication network connection devices, etc., the establishment of specialized agencies prescribed by Presidential Decree, procedures and fees for information protection certification, standards for designating certification testing agencies, etc.; △(Public Notice) the revised information protection guidelines for information and communication network connection devices, etc., and the establishment of a public notice on certification standards for information protection certification, etc.

An official from the Ministry of Science and ICT said, “Based on the results of the research group’s operation, we will establish a direction for improving the IoT security certification system and establish a legal basis for the certification system through subordinate statutes of the Information and Communications Network Act,” he said. “We plan to promote the distribution of products with secured security through the IoT security certification system.”