South Korea's Ministry of Science and ICT said on Monday it will, with the Korea Internet and Security Agency (KISA), push ahead with a support programme to help domestic companies build and operate software (SW) supply chain security management systems, following a similar effort last year.
As digital technologies become part of daily life, software is converging with industries such as manufacturing, transportation and healthcare, establishing itself as a key element of digital transformation. As a result, software supply chains are becoming more complex and new types of threats targeting vulnerabilities are emerging. In particular, software supply chain attacks can have a large impact on many companies and individuals with a single attack, making the risks greater.
The ministry and KISA will provide technical support under a 4 billion won 'Supply Chain Security Model Development Support Project'. The support will cover everything from building models to help companies that develop, supply and operate digital products and services manage software supply chain security on their own, to operations and measures to address security vulnerabilities.
This year, the ministry set out differences from last year's programme by seeking new supply chain security management models. For 2 of the 8 tasks, it will require consortia to include operating companies as well as developing and supplying companies, and carry out work through the stages of monitoring and responding to supply chain threats.
The ministry will hold a briefing on March 18 for company and institutional officials who want to take part in the project. Applications will be accepted through April 9. More details about the call for proposals are available on KISA's website.
Lim Jeong-gyu (임정규), director general for information security and network policy at the Ministry of Science and ICT, said strengthening supply chain security is a necessity, not a choice, as cyber threats targeting increasingly complex software supply chains surge and global regulations tighten. He said the ministry will work to strengthen domestic companies' supply chain security capabilities through the programme.