1. Reason for Amendment

This Amendment prescribes the method and procedure for verifying information security disclosures as delegated by the Act on the Promotion of Information Security Industry and matters necessary for the enforcement thereof. It also upgrades a number of provisions currently stipulated in the Notice, such as revocation of information security disclosures, to the Rule.

2. Major Provisions

 A. Method and procedure for verifying disclosed information (Article 3-2, newly inserted)

  1) Prescribe such matters as the scope of information security disclosure verification, exemptions, verification method, verification procedure, requests for modification, and designation and operation of a dedicated agency as delegated by the Act to the Ministry Ordinance.

 B. Registration and management of pre-inspection agencies (Article 3-3, newly inserted)

  1) Prescribe matters concerning the registration requirements, management, etc., of pre-inspection agencies for exempting businesses from verification of disclosed information, as information security disclosers who have undergone a pre-inspection of disclosed information conducted by a pre-inspection agency are excluded from the scope of verification conducted by the Minister of Science and ICT.

 C. Revocation of information security disclosure compliance (Article 3-4, newly inserted)

  1) Prescribe matters concerning the revocation of a disclosure as part of the verification procedure for disclosed information in the event that information that differs from the facts is disclosed, either willfully or due to gross negligence, or in the event of non-compliance with a request for modification without good cause.

 D. Operation of an information security disclosure deliberation committee (Article 3-5, newly inserted)

  1) Prescribe matters concerning a committee to deliberate and provide opinions on matters concerning the disclosure system, such as whether a person has information security disclosure obligations, the verification of disclosed information, and the verification procedure.