Korea University's Kim Seung-joo urges linked RMF, Zero Trust standards
Speaking at KIISC's 6th AI × RMF Workshop in Seoul, the professor said resilience aims to keep core operations running during an attack.
Kim Seung-joo, a professor at Korea University's Graduate School of Information Security, called for RMF, Zero Trust and cyber resilience to be linked through common national security standards, in a presentation at the 6th AI × RMF Workshop of the Korea Institute of Information Security and Cryptology (KIISC). The workshop was held on October 22 at Samsung SDS West Campus in Seoul, according to dailysecu.com.
In his talk, titled "RMF & Cyber Resilience," Kim laid out RMF's seven steps: preparation, categorization, security control selection, implementation, assessment, operation approval and continuous monitoring.
He also drew a line between cyber resilience and disaster recovery, saying resilience aims to keep core operations running even while an attack is under way. He cited four goals for resilience: anticipate, withstand, recover and adapt.
As an example of a common framework, Kim pointed to NIST CSF and NIST SP 800-53, which the US uses to link its security systems together.
Older roots of the framework
The Trusted Computer System Evaluation Criteria (TCSEC) appeared in 1983 and later led to the international Common Criteria (CC). US RMF is used not only in defense but also across the federal government and intelligence agencies, with CMMC assessing defense contractors' compliance.
Quick answers
What are RMF's seven steps?
Preparation, categorization, security control selection, implementation, assessment, operation approval and continuous monitoring, as set out by Kim Seung-joo.
How does cyber resilience differ from disaster recovery?
Kim said resilience aims to keep core operations running even during an attack, with the goals of anticipate, withstand, recover and adapt.
Where was the workshop held?
At Samsung SDS West Campus in Seoul on October 22, at the 6th AI × RMF Workshop of KIISC.