SGA솔루션즈 CEO proposes tying AI security rules to existing Korean certification schemes
At the KIISC 2026 AI x RMF workshop on October 22, SGA솔루션즈 CEO 최영철 proposed adding AI-specific controls to ISMS-P, N2SF and K-RMF instead of creating a new certification.
SGA솔루션즈 CEO 최영철 proposed a Korean AI cybersecurity framework that adds AI-specific controls to the country's existing security systems and cross-links overlapping standards across ministries, in a talk at the KIISC 「2026 AI x RMF 워크숍」 held on October 22 at Samsung SDS West Campus in Seoul, according to dailysecu.com.
Under the title 「한국형 AI 사이버보안 프레임워크 추진 전략 제언」, he argued against creating a separate new AI security certification and instead suggested extending existing national schemes with AI controls. He said Korea's security systems are split across the public, private, defense and financial sectors, each with different controls and procedures.
He pointed to the U.S. NIST CSF and RMF, which share the common control baseline SP 800-53, as a model for a common Korean control framework. His proposal is structured around three areas: governance, threats and controls.
Among the AI threat types he named were prompt injection, training data poisoning, AI model compromise and AI agent privilege abuse.
He suggested adding AI controls to ISMS-P, N2SF and K-RMF, together with common control ID numbers and cross-mapping tables so that a single measure can be recognized across multiple certification schemes.
He stressed that the presentation was his personal proposal and not confirmed government policy.
快速问答
SGA솔루션즈 CEO提出了什么AI安全方案？
他主张在ISMS-P、N2SF和K-RMF等现有国家认证体系中加入AI专用控制项，而不是另建一套AI安全认证，并配以通用控制编号和交叉映射表。
这一提案在何时何地发表？
2026年10月22日，在首尔三星SDS西校区举行的韩国信息安全学会「2026 AI x RMF 워크숍」上。
这是韩国政府的正式政策吗？
不是。他在演讲中强调，该内容属于个人提案，并非已确认的政府政策。