Research on Strengthening Response Capabilities for Information System Failures

This study examines the need for policy standardization and institutionalization of information system failure management. Based on international standards and domestic laws, we analyzed domestic and international cases. The case studies identified four key challenges: first, prompt and transparent disclosure of the cause, impact, and recovery plan in the event of a failure; second, ensuring the resilience of data centers and platforms; third, strengthening legal accountability; and fourth, improving alignment with international standards. While the domestic system has a basic legal framework, it lacks the necessary integration with the continuity and risk management systems required by international standards. Furthermore, we found limitations in guidelines across institutions and the formalization of preventive inspections. Therefore, this study proposes policy improvements, including: ① standardizing notification standards; ② mandating resilience; ③ establishing a public-private joint training and evaluation system; and ④ ensuring alignment between international standards and domestic systems.