The first step toward the success of the Korean risk management framework (KRMF)

Abstract

The risk management framework (RMF) applied by the United States combines the concepts of information security and risk management in the product development process. This includes the systematic structure of equipment, parts, other construction systems, facilities, and personnel, as well as the related security of cyberspace. This concept has been a concept that has been systematically applied for the completion of information security from the requirement planning stage to the destruction of the weapon system. The RMF, which should be reflected in the project of power enhancement to ensure the perfect performance of the weapons system that our military will use in the future, is unfamiliar to Republic of Korea Army (ROK). RMF is a step-level field that has not yet been based on detailed research and measures in any ROK military, such as the Army, Navy, and Air Force. However, the USFK, which is stationed in the Republic of Korea during peacetime, and the United States’ wartime reinforcement forces [Flexible Deterrence Option (FDO), Force Module Package (FMP), Time Phased Forces Deployment Data (TPFDD)], which are deployed at the request of the CFC Commander in the event of a crisis situation on the Korean peninsula and under the direction of the Joint Chiefs of Staff, are thoroughly prepared for cyber threats by applying the RMF procedure. Therefore, the military should also create and apply the corresponding procedures during combined and joint operations as soon as possible. This study aims to provide a direction for the development of a categorization system, which is the most basic and important step 1 system in the RMF process, and I hope that it will help in the implementation of the Korean Risk Management Framework (KRMF) that should be applied in the future.