• Title/Summary/Keyword: Operation Audit

Search Result 93, Processing Time 0.026 seconds

Survey on Personal Information Encryption Technology (개인정보 암호화 기술에 관한 연구)

  • Kim, Ji Hyun;Lee, Dong Hoon
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2012.10a
    • /
    • pp.769-772
    • /
    • 2012
  • Personal Information Article2 defines personal authentication information, secret information, bio information for personal information and it is stipulated under article29 that the one who have duties must take adequate technological, administrative, physical measures to prevent from illegal reading and sneaking. Also it is stipulated under information communication network law28(1), enforcement regulation9, Korea Communications Commitee notice. To satisfy this, the one who have to take security actions of personal information are required to take technological measures and establish positive measures to continuously manage it.The insurance of technological security is possible by encryption of personal information, secure management and operation of encryption key,taking personal information security level of providin access control of personal information reading and audit.In this paper, we will analyze various technologies of personal information encryption which are essencial component in technological security measuresof personal information. This paper will help choose which technological measures you should take in personal information security.

  • PDF

The applicability of financial indices as a measure of managerial performance of general hospitals (재무지표를 이용한 병원경영성과 유형화 방안)

  • 류규수
    • Health Policy and Management
    • /
    • v.6 no.1
    • /
    • pp.191-210
    • /
    • 1996
  • This study purported to acquire information necessary to improve the operational efficiency of general hospitals. It tried to determine major indices which represent managerial performance of general hospitals and to identify the managerial characteristics of general hospital which affect the major financial indices. 201 hospitals which were subject to standardization audit by the Korean Hospital Association were investigated and 80 hospitals were finally chosen for this study. Their financial and managerial data during the period between January 1991 and December 1991 were collected. Considering financial indices in this study were the ration of net income to total asset, income growth rate, and quick ration. The results of study are summarized as followings. First. The ration of net income to total assets and quick ration were highly related to managerial characteristics of general hospitals. Therefore, the standardization of three financial indices should be needed to systematically check the operational efficiency of general hospitals. Second, the sample hospitals can be classified as four groups on the basis of their financial indices' level. 4 of those hospitals(5.0%) showed high level of performance in terms of three financial indices and 27 of them(33.7%) showed that they are highly related to only two financial indices. 34 hospitals(42.5%) showed they have high level of relationship with only one indices and 15 hospitals(18.8%) showed very weak performance level with three indices. In addition, there is no hospitals to show mid-range level of managerial performance in relation to all three financial indices. Third, there is no significant relationship between three financial indices and the managerial characteristics of hospitals such as the number of beds, type of operation, location of hospitals, and etc. However, in the case of hospitals which have high level of managerial performance, they have more specialists and medical support personnel in comparison to low performance hospitals. They also have high level of bed occupancy rate and average length of stay(ALOS). In conclusion, the study showed the standardization of 3 financial indices are necessary to systematically evaluate the managerial performance of general hospitals and provide more accurate operational information for each hospital. To do so, it is necessary to focus on management side of hospital such as the effective human resource management and quality enhancement of medical treatment.

  • PDF

Structural Integrity Evaluation by System Stress Analysis for Fuel Piping in a Process Plant (공정플랜트 연료배관의 시스템응력 해석에 의한 구조 건전성 평가)

  • Jeong, Seong Yong;Yoon, Kee Bong;Duyet, Pham Van;Yu, Jong Min;Kim, Ji Yoon
    • Journal of the Korean Society of Safety
    • /
    • v.28 no.3
    • /
    • pp.44-50
    • /
    • 2013
  • Process gas piping is one of the most basic components frequently used in the refinery and petrochemical plants. Many kinds of by-product gas have been used as fuel in the process plants. In some plants, natural gas is additionally introduced and mixed with the byproduct gas for upgrading the fuel. In this case, safety or design margin of the changed piping system of the plant should be re-evaluated based on a proper design code such as ASME or API codes since internal pressure, temperature and gas compositions are different from the original plant design conditions. In this study, series of piping stress analysis were conducted for a process piping used for transporting the mixed gas of the by-product gas and the natural gas from a mixing drum to a knock-out drum in a refinery plant. The analysed piping section had been actually installed in a domestic industry and needed safety audit since the design condition was changed. Pipe locations of the maximum system stress and displacement were determined, which can be candidate inspection and safety monitoring points during the upcoming operation period. For studying the effects of outside air temperature to safety the additional stress analysis were conducted for various temperatures in $0{\sim}30^{\circ}C$. Effects of the friction coefficient between the pipe and support were also investigated showing a proper choice if the friction coefficient is important. The maximum system stresses were occurred mainly at elbow, tee and support locations, which shows the thermal load contributes considerably to the system stress rather than the internal pressure or the gravity loads.

OHDSI OMOP-CDM Database Security Weakness and Countermeasures (OHDSI OMOP-CDM 데이터베이스 보안 취약점 및 대응방안)

  • Lee, Kyung-Hwan;Jang, Seong-Yong
    • Journal of Information Technology Services
    • /
    • v.21 no.4
    • /
    • pp.63-74
    • /
    • 2022
  • Globally researchers at medical institutions are actively sharing COHORT data of patients to develop vaccines and treatments to overcome the COVID-19 crisis. OMOP-CDM, a common data model that efficiently shares medical data research independently operated by individual medical institutions has patient personal information (e.g. PII, PHI). Although PII and PHI are managed and shared indistinguishably through de-identification or anonymization in medical institutions they could not be guaranteed at 100% by complete de-identification and anonymization. For this reason the security of the OMOP-CDM database is important but there is no detailed and specific OMOP-CDM security inspection tool so risk mitigation measures are being taken with a general security inspection tool. This study intends to study and present a model for implementing a tool to check the security vulnerability of OMOP-CDM by analyzing the security guidelines for the US database and security controls of the personal information protection of the NIST. Additionally it intends to verify the implementation feasibility by real field demonstration in an actual 3 hospitals environment. As a result of checking the security status of the test server and the CDM database of the three hospitals in operation, most of the database audit and encryption functions were found to be insufficient. Based on these inspection results it was applied to the optimization study of the complex and time-consuming CDM CSF developed in the "Development of Security Framework Required for CDM-based Distributed Research" task of the Korea Health Industry Promotion Agency. According to several recent newspaper articles, Ramsomware attacks on financially large hospitals are intensifying. Organizations that are currently operating or will operate CDM databases need to install database audits(proofing) and encryption (data protection) that are not provided by the OMOP-CDM database template to prevent attackers from compromising.

Strength and Durability Test of Rapid Hardening Composite Mat for Protect Railway Slope in Operation (운영중인 철도비탈면 보호를 위한 초속경 복합매트의 강도 및 내구성 실험)

  • Hyun-Sang, Yoo;Tae-Hee, Kang;Hyuk-Sang, Jung;In-Chul, Back
    • Journal of the Korean Geosynthetics Society
    • /
    • v.21 no.4
    • /
    • pp.79-91
    • /
    • 2022
  • Recently, the frequency of damage to slopes for highways, railways, and complexes has been increasing according to abnormal climates such as heavy rainfall or snowfall. Rapid Hardening Composite Mat (RHCM) could be a satisfactory alternative because it has the advantages that large-scale earthwork is not essential and the period for restoration is minimized. Also, this method does not require heavy machines and a phase of maintenance for slopes against the shotcrete method or planted slope protection, which are representative slope protection methods. Furthermore, the curing time is shorter than Geosynthetic Concrete Composite Mat (GCCM). Therefore, RHCM could be useful for emergency restoration work. Thus, in this study, the strength and duration of RHCM are estimated, compared, and analyzed with GCCM. As a result of the laboratory test, the strength of RHCM is greater 51%, and the duration is larger 69% than GCCM.

Improvement Research for Information Protection Management System of Small and Medium Enterprises (중소기업의 정보보호 관리체계 개선방안 연구)

  • Hye-Joung Yun;Yong-Woo Lee;Hee-Doo Heo;Sam-Hyun Chun
    • The Journal of the Institute of Internet, Broadcasting and Communication
    • /
    • v.23 no.2
    • /
    • pp.15-20
    • /
    • 2023
  • Recently, digitalization is accelerating in all industries, and the use of information and personal information produced and used in the process of it is very important for the success or failure of a company. However, malicious attempts to steal or leak major information and personal information of a company as an adverse effect continue to increase, and appropriate defense and response are absolutely necessary. However, in the case of small and medium-sized enterprises, the priority of information protection and the possession of professional manpower are very insufficient compared to large enterprises. This paper studies the certification and audit implemented in Korea, and suggests ways to expand the certification of the information protection system suitable for SMEs and improve the effectiveness of the support system through the expansion of the privacy law notification standard and operation of support system.

Efficacy of ISO 9001 : 2000 Quality Management System in Human Assisted Reproductive Technology Center (보조생식술 센터에서 ISO 9001 : 2000 품질경영시스템의 도입 및 시행의 효용성)

  • Jun, Jin-Hyun;Park, Yong-Seog;Lee, Hyoung-Song;Kim, Soon-Duk;Hwang, Son-Hee;Han, Su-Kyoung;Kim, Jae-Ho;Song, In-Ok;Kang, Inn-Soo;Koong, Mi-Kyoung
    • Clinical and Experimental Reproductive Medicine
    • /
    • v.34 no.2
    • /
    • pp.107-115
    • /
    • 2007
  • Objective: A quality management system of international standardization organization (ISO) 9001:2000 has been proposed to properly evaluate and improve the quality of productions and services. The purpose of this article was to describe on successful introduction and application of the ISO system to human assisted reproductive technology (ART) center. Methods: Center for reproductive medicine and infertility of Cheil General Hospital started the action for ISO 9001:2000 certification at January-2004. The ISO system of our center was monitored by measuring the customer satisfaction index and periodical internal and external audit. Reports of non-conformity described corrective and preventive actions for problems and occurrences that were not consistent with the standard process and operation of our center. Continuous management and improvement were performed on the project of customer dissatisfaction. Results: Our center has got the certification of ISO 9001:2000 for "Research and development of IVF-ET program for infertility treatment" from Korean Foundation for Quality at June-2004. The policy of ISO was "To establish the best center of reproductive medicine and infertility" and "To establish the best quality management system". We found 140 cases and 7 cases of non-conformity in internal and external audit for three years, respectively, and performed corrective action. Conclusion: Improvement of customer satisfaction, systemic documentation and transparency and efficacy of working procedure were achieved by application and operation of the ISO system to our center. This ISO system could be used as a basic institutional management system for the national guideline to the human ART center.

A Study on the reflection ratio of ICAO Annex 6 (Operations of Aircraft) incorporated into our domestic air laws - Focused on ICAO Annex 6 Part I (International Commercial Air Transport - Aeroplanes) - (ICAO 부속서 6(항공기 운항)의 국내 항공법령 반영률에 관한 연구 - ICAO Annex 6 Part I (국제상업항공운송-항공기)을 중심으로 -)

  • Noh, Kun-Soo;Jie, Min-Seok;Kim, Woong-Yi
    • The Korean Journal of Air & Space Law and Policy
    • /
    • v.28 no.2
    • /
    • pp.97-115
    • /
    • 2013
  • The world-wide principal criteria of aircraft operations is ICAO Annex 6. Operations of Aircraft. Among ICAO Annex 6, Part I is for International Commercial Air Transport - Aeroplanes and it assumes major part of civil aviation. ICAO has been providing Contracting States with SARPs(Standards and Recommended Practices) and monitor each State's reflection degree into their domestic air law, so-called USOAP(Universal Safety Oversight Audit Program). Current ICAO USOAP is Snap-shot method, but it will be changed to USOAP-CMA method from the year of 2013. ICAO USOAP results have overall effects on national aviation industry such as routes, insurance, airlines cooperation and so forth. Low grades of results attract international attention and that leads to flag carrier's operation stoppage, route restriction, airlines cooperation restriction, insurance increase directly or indirectly. Thus it is important to get excellent grades in ICAO USOAP and to maintain confidence. Our government ranked top to get 98.89 grades in 2008 ICAO USOAP but after 2008 the revised provisions have not been reflected sufficiently into our air law. So I would like to grip reflection ratio of ICAO Annex 6 Part I into our domestic air law by using the most updated revised edition on this paper. Together I would like to suggest alternatives for the non-reflected and partially reflected.

  • PDF

A Study on the Analysis and Efficiency of Police Budget (경찰의 예산분석 및 효율화 방안에 관한 연구)

  • Park, Jong-Seung;Kim, Chang-Yun
    • Korean Security Journal
    • /
    • no.38
    • /
    • pp.7-32
    • /
    • 2014
  • This study is aimed to analyze problems of police budgetary execution and to suggest better ways for establishing effective budget implementation as well as legitimacy of securing budget in the field of police work. For this purpose, this paper analyzed the annual reports on police budgetary execution, from 2009 to 2012, conducted by National Assembly Budget Office. In result, most parts of the police budgetary execution were not satisfied with the audit standard, and especially in terms of management of budgetary execution, it showed 40% in inappropriateness. In addition, excessive and underestimate appropriation in the police budgetary execution, which happened frequently in other offices, was recorded on the second place. 10% of the amount of budget was executed for ordinance violence. Given results analyzed from each division, Transportation Division occupied 40% of the amount of related problems and all of types in the field did not meet the audit standard, thus it is required to manage budgetary execution effectively. In terms of Public Safety Division, the problem was related to budgetary allocation prior to execution, such as overlap in other works, excessive and underestimate appropriation, and inappropriate business plans. Director General for Planning and Coordination did not meet the standard of law system maintenance, Given the light of the result of analyzing programs, traffic safety and securing communication was the most problematic and support for police administration, crime prevention and protecting the disadvantaged, educating professional police officers, and establishment of policing infrastructure were required to be reformed in sequence. In order to resolve these problems, it is demanded to check budgetary execution and the process in business plans on a regular basis. Additionally, in case of using budget in inappropriate parts, tough penality including reduction of budget in related to the local police should be implemented to increase the importance of budgetary execution. Moreover, because of the fact that a part of problem of budgetary execution was originally caused by the budgetary allocation, it is advised to allocate police budget using the budget proposal of National Finance Act and Ministry of Strategy and Finance.

  • PDF

A Study on Air Operator Certification and Safety Oversight Audit Program in light of the Convention on International Civil Aviation (시카고협약체계에서의 항공안전평가제도에 관한 연구)

  • Lee, Koo-Hee;Park, Won-Hwa
    • The Korean Journal of Air & Space Law and Policy
    • /
    • v.28 no.1
    • /
    • pp.115-157
    • /
    • 2013
  • Some contracting States of the Convention on International Civil Aviation (commonly known as the Chicago Convention) issue FAOC(Foreign AOC and/or Operations Specifications) and conduct various safety audits for the foreign operators. These FAOC and safety audits on the foreign operators are being expanded to other parts of the world. While this trend is the strengthening measure of aviation safety resulting in the reduction of aircraft accident, it is the source of concern from the legal as well as economic perspectives. FAOC of the USA doubly burdens the other contracting States to the Chicago Convention because it is the requirement other than that prescribed by the Chicago Convention of which provisions are faithfully observed by almost all the contracting States. The Chicago Convention in its Article 33 stipulates that each contracting State recognize the validity of the certificates of airworthiness and licenses issued by other contracting States as long as they meet the minimum standards of the ICAO. Consequently, it is submitted that the unilateral action of the USA, China, Mongolia, Australia, and the Philippines issuing the FOAC to the aircraft of other States is against the Convention. It is worry some that this breach of international law is likely to be followed by the European Union which is believed to be in preparation for its own unilateral application. The ICAO established by the Chicago Convention to be in charge of safe and orderly development of the international civil aviation has been in hard work to both upgrade and emphasize the safe operation of aircraft. As the result of these endeavors, it prepared a new Annex 19 to the Chicago Convention with the title of "Safety Management" and with the applicable date 14 November 2013. It is this Annex and other ICAO documents relevant to the safety that the contracting States to the Chicago Convention have to observe. Otherwise, it is the economical burden due to probable delay in issuing the FOAC and bureaucracies combined with many different paperworks and regulations depending on where the aircraft is flown. It is exactly to avoid this type of confusion and waste that the Chicago Convention aimed at when it was adopted in 1944. The State of the operator shall establish a system for both the certification and the continued surveillance of the operator in accordance with ICAO SARPs to ensure that the required standards of operations are maintained. Certainly the operator shall meet and maintain the requirements established by the States in which it operate. The authority of a State stops where the authority of another State intervenes or where the former has yielded its power by an international agreement for the sake of international cooperation. Hence, it is not within the realm of the State to issue FAOC towards foreign operators for the reason that these foreign operators are flying in and out of the State. Furthermore, there are other safety audits such as ICAO USOAP, IATA IOSA, FAA IASA, and EU SAFA that assure the safe operation of the aircraft, but within the limit of their power and in compliance with the ICAO SARPs. If the safety level of any operator is not satisfactory, the operator could be banned to operate in the contracting States with watchful eyes until the ICAO SARPs are met. This time-honoured practice has been applied without any serious problems. Besides, we have the new Annex 19 to strengthen and upgrade with easy reference for contracting States. We don't have no reason to introduce additional burden to the States by unilateral actions of some States. These actions have to be corrected. On the other hand, when it comes to the carriage of the Personal or Pilot Log Book, the Korean regulation requiring it is in contrast with other relevant provisions of USA, USOAP, IOSA, and SAFA. The Chicago Convention requires in its Articles 29 and 34 only the carriage of the Journey Log Book and some other certificates, but do not mention the Personal Log Book at all. Paragraph 5.1.1.1 of Annex 1 to the Chicago Convention even makes it clear that the carriage in the aircraft of the Personal Log Book is not required on international flights. The unique Korean regulation in this regards giving the unnecessary burden to the national flag air carriers has to be lifted at once.

  • PDF