국내 금융보안 규제의 개선 방안 연구: EU 디지털운영복원력법과의 비교를 중심으로

초록

Recently, the EU recognized that opportunities and risks in the digital financial environment exist due to digitalization and the sophistication of cyber threats, and recognized the need for a new regulatory supervision system. Accordingly, the EU enacted the Digital Operational Resilience Act, pursuing the promotion of digital resilience of financial institutions, and introducing a direct supervision method for ICT third parties for the first time. The EU Digital Operational Resilience Act emphasizes the role and responsibility of senior management in financial security and requires the establishment of a governance-based ICT risk management framework. In addition, it regulates supervision and management of ICT third parties and introduces a strong regulatory framework to prevent ICT risks from undermining financial stability. This paper examines the main contents of the Digital Operational Resilience Act, compares and analyzes it with Regulation on Supervision Electronic Financial Transactions in South Korea, and suggests improvement directions for the improvement of financial security regulations.

키워드