"Now Public Institutions Use iPhones Too"…NIS Establishes Security Standards

Apple Enhances MDM Features... "Meets Government Requirements"
National Intelligence Service to Collect Opinions Until the 20th, Implementation in February

[Asia Economy Reporter Jang Hee-jun] The government and public institutions can now use 'Apple iPhones' as work smartphones. Until now, iPhones could not be used for institutional work because separate security standards were not established, unlike Android. However, the intelligence authorities plan to finalize the security standards for iPhones by the end of this month and begin full implementation next month.

The National Intelligence Service (NIS) announced on the 11th that the national security requirements for mobile device management (MDM) products for iPhones have been tentatively finalized, and if these security standards are met, the iPhone product line can be used as work smartphones for national and public institutions.

Remote Data Deletion in Case of Device Loss

MDM is a type of software that enhances the security of mobile devices by blocking internet, recording, camera functions, etc., making them suitable for work use. It also includes features to remotely lock or delete data if the device is lost.

The NIS disclosed the national security requirements for the 'iOS and iPadOS Mobile Device Security Management Products,' which serve as the security compliance verification standards when introducing iPhones, on the NIS website and the National Cybersecurity Center website on the same day.

According to the NIS, the security requirements include provisions that institutional security managers must be able to effectively control hardware such as cameras and microphones when introducing iPhones for work purposes, and take emergency measures such as remote locking or initialization if a user loses an iPhone.

The NIS plans to collect additional opinions on the disclosed security requirements until the 20th and finalize the plan. If there are no significant objections, it will be applied from February 1.

Earlier, in June last year, the NIS announced the policy to develop national security requirements corresponding to iPhones at an IT security product security compliance verification policy briefing and has been conducting related work, including gathering industry opinions.

Regarding this, an NIS official explained, "There have been many requests that not only Android smartphones but also iPhones should be usable for public sector work. Recently, Apple enhanced the iPhone MDM functions, meeting our government's requirements, and we judged that developing security requirements was possible."

Apple Photo by Yonhap News

Initially, the NIS planned to allow only 'institution-owned' iPhones. However, considering budget and administrative burdens related to bulk purchasing of iPhones and user convenience, personal iPhones can also be registered for work use after undergoing necessary procedures.

Regarding which operating system smartphone?Android or iPhone?to use for work, the NIS believes it is a decision for each institution to make.

An NIS official said, "With the establishment of security standards for MDM products for iPhones, national and public institutions can build a more diverse mobile work environment while ensuring security. The NIS will continue to gather industry opinions and improve related policies as a cybersecurity protection agency."

Meanwhile, this security compliance verification is independent of whether the source code is disclosed, and for iPhone MDM to be listed in the security compliance verification product list, it must comply with national security requirements.

This content was produced with the assistance of AI translation services.