KISA Listed as Co-Author of 'Security Internalization Guide'

Participation in Reviewing Guides Published by US CISA and Overseas Related Agencies

The Korea Internet & Security Agency (KISA) announced on the 19th that it participated in the review process of the security embedding guide released by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) along with overseas related organizations, in collaboration with the Ministry of Science and ICT.

Following the Korea-U.S. Cybersecurity Framework summit agreement in April and the launch of the Cybersecurity Senior Steering Group (SSG), Korea has been seeking ways to strengthen cooperation with CISA in the field of cybersecurity. As part of this cooperation, the review of the guide was conducted.

This guide emphasizes security embedding for product and software developers under three principles: ownership, transparency and accountability, and leadership. Key contents include ownership of security outcomes, developers' responsibility to design and develop products securely, enhancing transparency regarding products such as software specifications and roadmaps, and fostering internal practices where executives prioritize security in business.

Choi Kwang-hee, Head of KISA's Cyber Incident Response Center, stated, "The review process of this guide provided a valuable opportunity to encounter diverse perspectives from overseas related organizations on cybersecurity," and added, "KISA plans not only to complete the review but also to prepare a Korean version of this guide to serve as a stepping stone for the safe development of domestic software products."

This content was produced with the assistance of AI translation services.