Operation of Protective Facilities

According to the importance and characteristics of each protected area, the necessary facilities shall be provided and operating procedures established and operated in preparation for man-made disasters and natural disasters such as fire, flood damage, and power anomalies.

※ Physical protective facilities (examples)

• Temperature/humidity controller (precision air conditioner or air conditioner)
• Fire detection and fire suppression equipment
• Water leak detector
• UPS, emergency generator
• Voltage regulator, grounding facilities
• Dual power lines
• Intrusion alarm
• CCTV
• Access control system (ID card, biometric recognition, weight detection, etc.)
• Emergency lights, emergency exit route signs, etc.

When operations are outsourced to an external integrated information and communications facility (IDC), the requirements necessary for physical protection shall be reflected in the contract and the operating status shall be reviewed periodically.

• Compliance with information security related laws, preparation for disasters/emergencies such as fire and power anomalies, access control, control of asset carry-in/carry-out, application of physical security controls such as video surveillance, and matters concerning compensation for damages in the event of an incident, etc.
• Whether the IDC has taken out liability insurance (an administrative fine of up to KRW 20 million is imposed if not taken out)

※ Reference laws and notices related to integrated information and communication facilities

• Act on Promotion of Information and Communications Network Utilization and Information Security, etc. Article 46 (Protection of Integrated Information and Communication Facilities)
• Enforcement Decree of the Act on Promotion of Information and Communications Network Utilization and Information Security, etc. Article 38 (Taking Out Insurance)
• Guidelines for the Protection of Integrated Information and Communication Facilities
• Framework Act on Broadcasting Communications Development Article 35-3 (Grade Designation of Communication Facilities), Article 36 (Procedure for Establishing the Basic Plan for Broadcasting and Communications Disaster Management), Article 36-2 (Implementation of the Broadcasting and Communications Disaster Management Plan)
• Enforcement Decree of the Framework Act on Broadcasting Communications Development Article 23 (Major Broadcasting and Communications Business Operators), Article 23-3 (Grade Classification Criteria for Communication Facilities, etc.)
• Standards for Grade Designation and Management of Communication Facilities of Major Communications Business Operators