The National Intelligence Service announced on the 3rd that it has established 'Hospital Information System Security Guidelines' to protect hospital computer systems and medical information directly related to people's lives from cyberattacks.
According to the National Intelligence Service, in recent years, cyber threat forces such as North Korea have been focusing on targeting medical information systems, and particularly, after declaring 2025 as the 'Year of Health Revolution,' North Korea is reportedly mobilizing hacking organizations to attempt infiltration into the computer networks of domestic bio and medical companies and spreading hacking emails, devoting efforts to stealing medical information and technology.
In response to these threats, the National Intelligence Service recently completed the 'Hospital Security Model Study' conducted jointly with the Ministry of Education, the Ministry of Health and Welfare, and hospital officials, and based on this, released security guidelines. The guidelines present a standard security model for six areas of hospital information systems, including medical, external linkage systems, and patient portals, and also include specific security measures for information security policies, system operations, and patient personal information protection.
In particular, efforts were focused on creating guidelines that information security practitioners from both national university hospitals and private general hospitals across the country can utilize on-site.
To enhance the effectiveness of the guidelines, the National Intelligence Service also held an on-site briefing. On March 14, it was first introduced through the 'Cybersecurity Council of National University Hospitals' composed of information security personnel from national university hospitals, and on the 3rd, key details were presented at the 'Spring Seminar of the Hospital Information Protection Association' attended by information security personnel from private advanced hospitals nationwide.
A National Intelligence Service official noted, 'Malicious hacking forces such as North Korea are openly intensifying cyberattacks on medical information systems that are directly linked to patients' lives, making the strengthening of cybersecurity in the medical field vital.' They added, 'We will continuously cooperate with hospitals and related agencies so the public can safely utilize medical facilities and receive medical services securely.'