Earticle

Recently, as evaluation of information security (IS) management become more diverse and complicated, the contents and procedure of the evidence to prepare for actual assessment are rapidly increasing. As a result, the actual assessment is a burden for both evaluation agencies and institutions receiving assessments. However, most of them reflect the evaluation system used by foreign government agencies, standard organizations, and commercial companies. It is necessary to consider the evaluation system suitable for the domestic environment instead of reflecting the overseas evaluation system as it is. The purpose of this study is as follows. First, we will present the problems of the existing information security assessment system and the improvement direction of the information security assessment system through analysis of existing information security assessment system. Second, it analyzes the technical guidance for information security testing and assessment and the evaluation of information security management in the Special Publication 800-115 'Technical Guide to Information Security Testing and Assessment' of the National Institute of Standards and Technology (NIST). Third, we will build a framework to implement the evidence collection system and present a system implementation method for the ‘6. Information System Security’ of ‘information security management actual condition evaluation index’. The implications of the framework development through this study are as follows. It can be expected that the security status of the enterprises will be improved by constructing the evidence collection system that can collect the collected evidence from the existing situation assessment. In addition, it is possible to systematically assess the actual status of information security through the establishment of the evidence collection system and to improve the efficiency of the evaluation. Therefore, the management system for evaluating the actual situation can reduce the work burden and improve the efficiency of evaluation.

Recently, as evaluation of information security (IS) management become more diverse and complicated, the contents and procedure of the evidence to prepare for actual assessment are rapidly increasing. As a result, the actual assessment is a burden for both evaluation agencies and institutions receiving assessments. However, most of them reflect the evaluation system used by foreign government agencies, standard organizations, and commercial companies. It is necessary to consider the evaluation system suitable for the domestic environment instead of reflecting the overseas evaluation system as it is. The purpose of this study is as follows. First, we will present the problems of the existing information security assessment system and the improvement direction of the information security assessment system through analysis of existing information security assessment system. Second, it analyzes the technical guidance for information security testing and assessment and the evaluation of information security management in the Special Publication 800-115 'Technical Guide to Information Security Testing and Assessment' of the National Institute of Standards and Technology (NIST). Third, we will build a framework to implement the evidence collection system and present a system implementation method for the '6. Information System Security' of 'information security management actual condition evaluation index'. The implications of the framework development through this study are as follows. It can be expected that the security status of the enterprises will be improved by constructing the evidence collection system that can collect the collected evidence from the existing situation assessment. In addition, it is possible to systematically assess the actual status of information security through the establishment of the evidence collection system and to improve the efficiency of the evaluation. Therefore, the management system for evaluating the actual situation can reduce the work burden and improve the efficiency of evaluation.

최근 지식정보 기술의 발달했으나 이의 역기능으로 해킹, 바이러스와 같은 보안침해사고가 증가하게 되었으며, 보안침해사고로부터 자신의 정보 자산과 정보기기를 보호하기 위해 컴퓨터 포렌식스가 등장하게 되었다. 그러나 디지털 증거의 잠재성, 취약성, 디지털성, 방대성 때문에 증거수집에 어려움이 있다. 본 논문에서는 포렌식스 절차별 사용도구를 분석하고, 이의 문제점인 정보, 무결성 부족등을 바탕으로 컴퓨터 포렌식스 증거수집 시스템을 제안 하였다.

재판절차의 적정성 내지는 그 결론에 대한 당사자의 신뢰를 확보하기 위해서는 법규 적용의 대상이 되는 구체적 사실이 유효하고 적절한 절차를 통하여 객관적으로 확정되어야만 한다. 그러나 증거가 편재되어 있는 공해소송, 제조물책임소송, 의료과오소송 등의 현대형 소송과 법률문제가 아닌 사실문제가 쟁점이 되는 건축소송, 교통사고소송 등의 경우에는 소송당사자에게 증거의 수집·제출책임을 일임하는 것은 적절하지 않다고 보인다. 때문에 증거의 구조적 편재현상을 극복하고, 당사자가 효율적으로 증거를 확보하여 구체적 사실이 적절하고 유효한 절차를 통해 객관적으로 확정될 수 있도록 함으로써 당사자의 재판에 대한 신뢰를 확보하기 위한 제도가 필요할 것이다. 본 논문은 크게 세부분으로 나누어 우선 현행 우리 민사소송법상의 마련된 제도로 문서제출명령과 증거보전제도 각각의 한계를 살펴본다. 문서제출명령은 현행 제도로 증거의 구조적 편재현상에 대응할 수 있는 거의 유일한 수단으로 평가 받고 있음에도 불구하고 조문체계상의 문제, 비공개심리절차에 대한 구체적 규정의 미비 등의 문제점이 지적된다. 또한 증거보전제도의 경우에는 단순히 본안소송의 증거조사 시까지 증거이용이 곤란해지는 것을 막는 데에 불과하다는 점이 한계로 보여진다. 따라서 증거수집에 관한 제도의 개선을 위하여 대륙법계 국가로서 미국의 증거개시제도를 부분적으로 수용하여 실정에 맞게 수용하여 운영하고 있는 독일의 독립적 증거절차와 일본의 당사자조회제도를 살펴본다. 마지막으로는 새로운 제도의 도입 가능성과 함께 앞으로의 방향에 대해 고찰해보고자 한다.

To achieve credibility of trial results, certain fact must be determined through a valid and appropriate procedure. However, recent legal action show that evidence is maldistributed on the one side of party, especially in a pollution·environmental lawsuit, medical malpractice suit, product liability action, and corporate litigation. In these legal actions, an adverse party who is usually a consumer, or patient has difficulty obtaining the evidence of facts to prove. If the party who has not proved satisfactorily is likely to lose the case according to the burden of proof. This phenomenon of ‘maldistribution of evidence’ could have caused distrust upon the legal system. Thus, in this article, suggests ways to overcome the maldistribution of evidence and to improve our procedures of evidence collection in a more effective way. This article is based on three parts. First, examines current procedure of evidence collection, focusing on orders for the production of documents and the preservation of evidence, under the Civil Procedure Act. Second, research to foreign legal system for the effective evidence collection, focusing on the independent evidentiary proceedings in Germany and the inquiry to opponent in Japan. both of contries are effort to overcome frustration and chronic delay in court, in Germany and in Japan for reformation of the Code of Civil Procedure, particularly relating to provisions for the collection of evidence. The German Code of Civil Procedure, there is "selbstandiges Beweisverfahren". The Japanese Code of Civil Procedure, there are essentially several means commonly employed by Japanese attorneys for collecting evidence. Finally, examines various way to improve our system being discussed, and conducts a comparative analysis of the systems for effective evidence collection system in german and japan. These comprehensive study could overcome the phenomenon of ‘maldistribution of evidence’ and to develop effective procedure of evidence collections. Furthermore the legal system could achieve to credibility of trial results,

정보통신기술의 발전에 따라 민사소송에서 활용되는 증거는 종이문서 중심에서 전자메일, 메신저 기록, 서버 로그, 데이터베이스, 클라우드 데이터 등 다양한 형태의 전자정보로 확대되고 있다. 그러나 현행 민사소송법은 증거방법에 따른 증거조사 중심의 체계를 유지하고 있어 전자정보의 특성을 충분히 반영하지 못하고 있으며, 전자정보를 독립적인 증거방법으로 규율하지도 않고 있다. 또한 문서제출명령, 사실조회, 증거보전 등 일정한 범위에서 증거수집 기능을 수행하는 제도가 존재하지만, 이들 제도는 개별 규정에 분산되어 있어 일반적이고 체계적인 증거수집절차로 기능하기에는 한계가 있다. 본 연구는 전자정보의 특성과 현행 민사소송법상 증거체계의 구조적 한계를 분석하고, 미국의 디스커버리 제도와 독일의 독립증거절차를 비교법적으로 검토하였다. 이를 통해 양국 제도가 증거수집과 증거조사를 기능적으로 구분하고, 다양한 형태의 증거를 포괄적으로 수집할 수 있는 절차를 마련하고 있다는 점에 주목하였다. 이를 바탕으로 본 연구는 현행 민사소송법상 증거규정을 증거수집절차와 증거조사절차로 기능적으로 재편할 필요성을 제시하였다. 구체적으로는 현행 증거보전절차를 일반적인 증거수집절차로 확대・재구성하고, 문서제출명령 등 개별 규정에 분산된 증거수집 기능을 통합하며, 문서・전자정보・유형물 등을 포괄적으로 수집 대상으로 규정하는 입법방향과 개정 초안을 제안하였다. 이러한 개편은 전자정보를 비롯한 새로운 형태의 증거를 현행 증거체계 안에서 유연하게 수용할 수 있을 뿐만 아니라, 당사자의 정보접근권을 강화하고 민사소송의 실효성과 적정성을 제고하는 데 기여할 것으로 기대된다.

With the rapid development of information and communication technology, evidence used in civil litigation has expanded beyond traditional paper documents to include electronically stored information (ESI), such as e-mails, instant messages, server logs, databases, CCTV recordings, and cloud-based data. Nevertheless, the Korean Civil Procedure Act remains structured around evidence-taking procedures classified by individual types of evidence and does not adequately reflect the characteristics of electronic information. Although existing mechanisms such as document production orders, requests for information, and preservation of evidence perform certain evidence-gathering functions, they are dispersed throughout the Act and fail to constitute a coherent and comprehensive evidence-gathering procedure. This study examines the characteristics of electronic information and identifies the structural limitations of the current Korean evidentiary framework. It further conducts a comparative analysis of the U.S. discovery system and the German independent evidence procedure (selbstandiges Beweisverfahren), both of which distinguish evidence gathering from evidence examination and provide comprehensive mechanisms for collecting various forms of evidence. Based on this comparative analysis, this article argues that the Korean Civil Procedure Act should be restructured to distinguish evidence-gathering procedures from evidence-taking procedures. Specifically, it proposes expanding and reorganizing the existing preservation of evidence procedure into a general evidence-gathering procedure, integrating dispersed evidence-gathering mechanisms such as document production orders, and establishing a comprehensive provision covering documents, electronically stored information, and tangible objects. Such reform would enable the current evidentiary framework to accommodate newly emerging forms of evidence more flexibly while enhancing parties’ access to information and improving the effectiveness and fairness of civil litigation.