Law Viewer

Back Home

ENFORCEMENT DECREE OF THE DEFENSE TECHNOLOGY SECURITY ACT

Presidential Decree No. 27264, jun. 28, 2016

Amended by Presidential Decree No. 28211, Jul. 26, 2017

Presidential Decree No. 29114, Aug. 21, 2018

Presidential Decree No. 31800, jun. 22, 2021

 Article 1 (Purpose)
The purpose of this Decree is to provide for matters delegated by the Defense Technology Security Act and those necessary for the enforcement thereof.
 Article 2 (Defense Technology Security Systems)
(1) A system for identifying and managing a technology subject to security control referred to in subparagraph 3 (a) of Article 2 of the Defense Technology Security Act (hereinafter referred to as the “Act”), means the following:
1. A system for classifying and identifying defense technologies that a target institution possesses or has secured through research and development;
2. A human and physical system for systematically accumulating and managing information related to defense technology.
(2) A system for access control and facility protection referred to in subparagraph 3 (b) of Article 2 of the Act shall mean the following:
1. A system for controlling human access through the appointment of a person responsible for the defense technology security, the designation of a protected area, and access restriction;
2. A facility protection system for detecting illegal access to defense technology through the installation of security equipment in a protected area.
(3) An information security system referred to in subparagraph 3 (c) of Article 2 of the Act means the following:
1. A security system that uses encryption technology, etc. for the safe storage and transmission of defense technology;
2. A protective system established by means of the installation of software for preventing the intrusion of defense technology by computer viruses, etc.;
3. A protective system established by means of the installation of firewall and security control system for detecting and blocking any intrusion to defense technology information;
4. A system to block external networks’ access to systems, computers, etc., that have access to defense technology information.
 Article 3 (Formulation of Comprehensive Plans)
The Minister of Defense Acquisition Program Administration shall formulate a comprehensive plan on the defense technology security, prescribed in Article 4 of the Act (hereinafter referred to as "comprehensive plan") by December 20 of the year prior to its implementation.
 Article 4 (Formulation of Action Plans)
(1) The Minister of Defense Acquisition Program Administration shall formulate an action plan for the defense technology security prescribed in Article 5 (1) of the Act (hereinafter referred to as "action plan") by December 20 of the year preceding its implementation.
(2) Where it is necessary to formulate an action plan, the Minister of Defense Acquisition Program Administration may request submission of necessary data from the head of a relevant administrative agency, such as the head of an information and investigation agency referred to in Article 6 (3) 4 of the Act (hereinafter referred to as “information and investigation agency”), and the head of a target institution.
(3) Where the Minister of Defense Acquisition Program Administration establishes an action plan, he/she shall notify it to the head of a relevant administrative agency and the head of a target institution.
 Article 5 (Composition and Operation of Defense Technology Security Committee)
(1) “Persons prescribed by Presidential Decree” in Article 6 (3) 1 of the Act means the following persons:
1. Head of the Office of Military Force and Resources Management of the Ministry of National Defense, and the Chief Director of the Defense Intelligence Agency;
2. Vice Minister of the Defense Acquisition Program Administration;
3. The Head of the Chief Directorate of Strategic Planning of the Joint Chiefs of Staff;
4. Vice Chief of Staff of the Army, the Vice Chief of Staff of the Navy, and the Vice Chief of Staff of the Air Force.
(2) The “information and investigation agencies determined by Presidential Decree” in Article 6 (3) 4 of the Act means the following institutions: <Amended on Jul. 26, 2017; Aug. 21, 2018>
1. National Intelligence Service;
2. Prosecutors’ Office;
3. National Police Agency.
4. Korea Coast Guard;
5. Defense Security Support Command.
(3) The term of office of the members of the Committee prescribed in Article 6 (3) 5 of the Act, shall be three years, and may be consecutively renewed only twice.
(4) The chairperson (hereinafter referred to as the “chairperson”) of the Defense Technology Security Committee prescribed in Article 6 (1) of the Act (hereinafter referred to as the "Committee") shall represent the Committee and have general supervision over and control of its affairs.
(5) Where the chairperson is unable to perform any of his/her duties in extenuating circumstances, the vice chairperson shall act on his/her behalf.
(6) Meetings of the Committee shall be convened when at least 1/3 of its incumbent members so request or when it is recognized as necessary by the chairperson.
(7) A majority of the members of the Committee shall constitute a quorum, and any decision thereof, which shall be made by an open vote, shall require the concurring vote of a majority of those present.
(8) Matters necessary for the composition and operation of the Committee, other than those otherwise expressly prescribed in paragraphs (1) through (7), shall be determined by the chairperson by a resolution of the Committee.
 Article 6 (Matters to Be Deliberated by Defense Technology Security Committee)
“Other matters prescribed by Presidential Decree” in Article 6 (1) 4 of the Act means matters related to amending important contents of a comprehensive plan.
 Article 7 (Composition and Operation of Working Committee)
(1) The working committee prescribed in Article 6 (4) of the Act (hereinafter referred to as the “working committee”) shall be comprised of not more than 25 members, including one chairperson.
(2) The Vice Minister of the Defense Acquisition Program Administration shall become the chairperson of the working committee, and its members shall be appointed or commissioned from among the following persons by the Minister of National Defense on the recommendation of the chairperson of the working committee:
1. Persons recommended by any member of the Committee falling under Article 6 (3) 1, 2, or 4 of the Act from among the public officials of Grade IV or higher or the field-grade officers of the institution to which he/she belongs;
2. Persons recommended by any member of the Committee falling under Article 6 (3) 3 of the Act, from among the employees of the institution where he/she belongs;
3. Other persons who have extensive knowledge and experience in the defense technology security.
(3)  The term of office of the members of the working committee prescribed in paragraph (2) 2 and 3 shall be three years, and may be consecutively renewed only twice.
(4) The working committee shall have one secretary to be in charge of handling its affairs, who shall be appointed by the chairperson of the working committee from among members falling under paragraph (2) 1.
(5)  Matters necessary for the composition and operation of the working committee, other than those prescribed in paragraphs (1) through (4), shall be determined by the chairperson of the working committee by a resolution of the working committee.
 Article 8 (Matters to Be Deliberated upon by Working Committee)
“Matters prescribed by Presidential Decree” in Article 6 (4) 2 of the Act shall mean matters necessary for consultation on, or coordinating, policy tasks related to the prevention of leakage of, and the security of, defense technology.
 Article 9 (Exclusion from, Challenge to and Refrainment by Committee Members)
(1) Where any member of the Committee or the working committee falls under any of the following, he/she shall be excluded from deliberating and passing resolutions on the relevant case:
1. If a member, him/herself, or his/her current or former spouse is a party to the relevant case or a joint holder of any right or liability with a party to the relevant case;
2. If a member is or was a relative to a party to the relevant case;
3. If a member has provided a testimony, statement, advice, research, service, or appraisal with regard to the relevant case;
4. If a member, or a corporation, organization, etc. where the member belongs, is or was involved in the relevant case as the representative of a party to the relevant case.
(2) If the circumstances indicate that fair deliberations and resolutions by a member are unlikely, the party to the relevant case may file a request to challenge the member with the Committee or the working committee, and the Committee or the working committee shall pass a resolution determining whether to accept the request. In such cases, the member subject to the request for challenge shall abstain from making such decision.
(3)  If a member of the Committee or the working committee falls under any cause for exclusion prescribed in paragraph (1), he/she shall refrain from the deliberation and decision of the relevant case.
 Article 10 (Dismissal of Commissioned Members)
(1) Where a member of the Committee pursuant to Article 6 (3) 5 of the Act falls under any of the following cases, the Minister of National Defense may dismiss him/her:
1. Where he/she is not capable of conducting his/her duties due to a mental incapacity;
2. Where he/she has committed an irregularity in relation to his/her duties;
3. Where he/she is deemed to be inappropriate to serve as a member due to neglecting duties, loss of dignity, or any other reasons;
4. Where he/she has failed to refrain despite falling under any of the subparagraphs of Article 9 (1);
5. Where he/she voluntarily expresses that it is difficult for him/her to conduct his/her duties.
(2) Where a member of the working committee prescribed in Article 7 (2) 2 or 3 falls under any of the subparagraphs of paragraph (1), the Minister of National Defense may dismiss such member.
 Article 11 (Designation, Change, and Cancellation of Designation of Defense Technology)
(1) In any of the following cases, the Minister of Defense Acquisition Program Administration may designate defense technology pursuant to Article 7 (1) of the Act, or change or cancel the designation of the defense technology under Article 7 (3) of the Act:
1. When the relevant administrative agency or target institution requests the designation, or change, or cancellation of the designation of defense technology;
2. When a reason arises for the designation, change, or cancellation of the designation of defense technology, due to changes in the technological environment, development of more advanced defense technology, etc.
(2) Where the relevant administrative agency or target institution intends to request the designation, change, or cancellation of the designation of defense technology, it shall submit the following materials to the Minister of Defense Acquisition Program Administration:
1. Scope and details of the relevant technology;
2. Reason for the request for the designation, change or cancellation of the designation;
3. Other reference materials related to the request for the designation, change or cancellation of the designation of defense technology.
(3) Where the request is deemed reasonable during a comprehensive consideration of the matters specified in the subparagraphs of paragraph (2), the Minister of Defense Acquisition Program Administration shall request deliberation on the designation, change or cancellation of the designation of the relevant defense technology.
 Article 12 (Statement of Opinions by Interested Parties)
(1) Where a request is made by an interested party under Article 7 (5) of the Act, the Committee shall require him/her to attend a meeting of the Committee or provide him/her with an opportunity to state his/her opinions in writing (including electronic documents; hereinafter the same shall apply).
(2) Any person who intends to state his/her opinions in writing pursuant to paragraph (1) shall submit to the Committee a written opinion statement of an interested person, containing the following matters determined by Ordinance of the Ministry of National Defense, together with other materials necessary for decision-making:
1. Type of relevant technology;
2. Ground for requesting an opportunity to state opinions;
3. Gist of his/her opinions.
 Article 13 (Application for Judgement of Defense Technology)
(1) An institution that intends to ask for the determination on whether the technology it possesses is qualified as defense technology under Article 7 (6) of the Act, shall submit to the Minister of Defense Acquisition Program Administration an application for defense technology evaluation prescribed by Ordinance of the Ministry of National Defense together with the following documents:
1. Data on the features, purposes, and performance of the technology it possesses;
2. Other additional materials necessary for decision on defense technology.
(2) The Minister of Defense Acquisition Program Administration in receipt of an application filed under paragraph (1), shall determine whether the relevant technology qualifies as defense technology within 15 days from the date of receiving the application, and inform the result thereof to the applicant in writing: Provided, That where it is necessary to conduct a technical examination of the technology for which the application for judgement is made, no period required for such technical examination shall be included in the period specified in the main sentence.
(3) Where a technical examination referred to in the proviso to paragraph (2) is required, the Minister of Defense Acquisition Program Administration shall inform the applicant of a time period required for such examination.
(4) Where the Minister of Defense Acquisition Program Administration determines the relevant technology as defense technology under paragraph (2), he/she shall issue the applicant with a defense technology certificate prescribed by Ordinance of the National Defense.
 Article 14 (Defense Technology Security When Conducting Research and Development Projects)
The measures for defense technology security by research and development phase referred to in Article 8 (1) of the Act shall include the following:
1. Matters related to the protection of the outcomes of research and development by phase;
2. Matters related to access control and facility protection;
3. Matters related to the prevention of cyber attacks such as hacking;
4. Other matters necessary for the management of defense technology security systems.
 Article 15 (Defense Technology Security at Time of Exportation or Domestic Transfer)
(1)  In accordance with Article 9 (3) of the Act, the Minister of Defense Acquisition Program Administration may take the following measures during the course of exportation of defense technology:
1. Review protective measures against illegal transfer, abuse, misuse, loss, theft, etc.;
2. Verify and review matters necessary for the defense technology security by country for export.
(2) In accordance with Article 9 (3) of the Act, the Minister of Defense Acquisition Program Administration may take the following measures during the course of domestic transfer of defense technology:
1. Verify the establishment of a defense technology security system by a target institution for domestic transfer;
2. Verify and review matters necessary for the defense technology security by target institution for domestic transfer.
 Article 16 (Report on Leakage or Intrusion of Defense Technology)
(1) Where the head of a target institution intends to make a report on leakage or intrusion of defense technology or ask for necessary investigation and measures under Article 11 (1) of the Act, he/she shall submit a written report on leakage or intrusion of defense technology or a written request for investigation and measures determined by Ordinance of the Ministry of National Defense to the Minister of Defense Acquisition Program Administration or the head of an information and investigative agency: Provided, That if an action is urgently needed, he/she shall file a report or a request for investigation and measures orally or in methods such as the information and communications network, and submit a written report, without delay, on leakage or intrusion of defense technology or a written request for investigation and measures. <Amended on Jun. 22, 2021>
(2) Upon recognition of any prohibited act under Article 10 of the Act or receipt of a report or a request for investigation and measures under Article 11 (1) of the Act, the Minister of Defense Acquisition Program Administration and the head of an information and investigative agency may investigate and take necessary measures through mutual cooperation, including a request for data, etc. <Amended on Jun. 22, 2021>
 Article 16-2 (Investigation)
(1) When the Minister of the Defense Acquisition Program Administration or the head of an information and investigative agency sends, pursuant to the main clause, with the exception of the subparagraphs of Article 11-2 (9) of the Act, a written notice such as a written request for attendance under paragraph (2) of the same Article, a written request for reporting under paragraph (3) of the same Article, a written request for submission of data under paragraph (4) of the same Article, and a written investigation on access to the scene under paragraph (5) of the same Article, or documents to be presented at the time of on-site investigation in accordance with the statutes and regulations (hereinafter referred to as "a written request for attendance, et.) to a person subject to investigation (referring to a legal entity, organization, or its organ or individual subject to investigation; hereinafter the same shall apply in this Article), he/she shall prepare a dispatch confirmation register prescribed by Ordinance of the Ministry of National Defense.
(2) A person subject to investigation who is notified of a written request for attendance, etc. may request the postponement of investigation pursuant to Article 11-2 (10) of the Act in any of the following cases:
1. Where it is impossible to operate a place of business due to a natural disaster, fire or any other disaster;
2. Where a person subject to investigation is required to submit data or undergo an on-site investigation pursuant to Article 11-2 (1) of the Act, in whose case the registers and documents subject to the investigation and other documents needed in the investigation are confiscated or provisionally seized by an authorized agency;
3. Where it is impracticable for a person subject to investigation (limited to an individual) to comply with the investigation due to any disease, long-term business trip, etc.;
4. Where the Minister of Defense Acquisition or the head of an information and investigative agency recognizes there is a cause corresponding to the provisions of subparagraphs 1 through 3.
(3) A person who intends to request postponement of an investigation under Article 11-2 (10) of the Act shall submit an application for postponement of investigation prescribed by Ordinance of the Ministry of National Defense to the Administrator of the Defense Acquisition Program Administration or the head of an information and investigation agency who has dispatched a written request for attendance, etc.
(4) The Minister of Defense Acquisition Program Administration or the head of an information and investigation agency shall determine whether to postpone an investigation within seven days from the date of receipt of an application for postponement of investigation under paragraph (3), and dispatch a notice of the result of application for postponement of investigation prescribed by Ordinance of the Ministry of National Defense to the applicant.
(5) Where a person subject to investigation intends to submit his/her opinion pursuant to Article 11-2 (11) of the Act, he/she shall submit a written opinion prescribed by Ordinance of the Ministry of National Defense to the Minister of the Defense Acquisition Program Administration or the head of an information and investigation agency.
(6) Where the Minister of Defense Acquisition Program Administration or the head of an information and investigation agency notifies the person subject to investigation of the result of investigation pursuant to Article 11-2 (12) of the Act, he/she shall send a notice of the result of investigation prescribed by Ordinance of the Ministry of National Defense to him/her.
[This Article Newly Inserted on Jun. 22, 2021]
 Article 17 (Current Status Investigation for Defense Technology Security)
(1) The scope of a current status investigation referred to in Article 12 (1) of the Act shall be as follows:
1. Current status of the establishment and operation of a defense technology security system by a target institution;
2. Current status of the development and implementation of measures necessary for the defense technology security under Article 8 of the Act;
3. Current status of the development of measures necessary for the defense technology security as at the time of exportation or domestic transfer under Article 9 of the Act;
4. Other matters on which a current status investigation must be conducted to understand the current conditions of the establishment and operation of a defense technology security system.
(2) The Minister of Defense Acquisition Program Administration may, where it is necessary in relation to the conduct of a current status investigation, may request cooperation from the head of a relevant administrative agency including an information and investigative agency. <Amended on Jun. 22, 2021>
 Article 18 (Establishment and Operation of Defense Technology Security Systems)
(1) Where the Minister of Defense Acquisition Program Administration intends to issue an improvement recommendation under Article 13 (2) of the Act or a corrective order under Article 13 (3) of the Act, he/she shall issue it in writing by specifying the details of the improvement recommendation or corrective order, its implementation period, etc.
(2) The head of a target institution in receipt of an improvement recommendation under Article 13 (2) of the Act or a corrective order under Article 13 (3) of the Act, shall submit the results of the implementation thereof in writing to the Minister of Defense Acquisition Program Administration within 30 days after the implementation period: Provided, That when the head of a target institution deems it impracticable to comply with the improvement recommendation or corrective order due to unavoidable reasons or impossible to complete compliance measures within the implementation period, he/she may submit written explanatory materials to the Minister of Defense Acquisition Program Administration or ask him/her to extend the implementation period.
 Article 19 (Support for Defense Technology Security)
(1) Where the Minister of Defense Acquisition Program Administration intends to provide support for the matters specified in the subparagraphs of Article 14 (1) of the Act, he/she shall formulate a support plan, and publicly announce the details of support, procedures for applying for support, etc. in advance.
(2) The detailed scope of support for the matters specified in the subparagraphs of Article 14 (1) of the Act shall be as follows:
1. Consultation on and financial support for the establishment and operation of a defense technology security system;
(a) Examination and consultation on the level of defense technology security, security vulnerabilities, etc.;
(b) Financial support for the design, establishment, and operation of a security system appropriate for the defense technology security;
2. Support for fostering professional human resources in defense technology security;
(a) Opening of education courses related to defense technology security and the provision of education materials;
(b) Dispatch of professional instructors and the nurturing of professional human resources in education;
3. Technical support, and support for technology development, for the defense technology security;
(a) Research and development, evaluation and practical research, and dissemination and diffusion of technologies for the defense technology security;
(b) Cause analysis and response support when leakage or intrusion of technology occurs through the information and communications network such as network, system, etc.;
4. Other necessary matters for the defense technology security of a target institution, including the prevention of leakage of defense technology, recovery from intrusion of the same, etc.
(3) Where the head of a target institution intends to obtain support under Article 14 (1) of the Act, he/she shall file an application for support in accordance with the public announcement procedures pursuant to paragraph (1).
(4) Upon receipt of an application for support under paragraph (3), the Minister of Defense Acquisition Program Administration may provide necessary support, including financial support, etc., within the budget, in consultation with the head of a relevant administrative agency, the President of the Agency for Defense Development, and the President of the Defense Agency for Technology and Quality; Provided, That when it is not possible to provide support, he/she shall inform the reason therefor to the head of the relevant target institution.
(5) The Minister of Defense Acquisition Program Administration may form and operate an advisory group in order to provide support for the defense technology security.
 Article 20 (Scope of Projects for International Cooperation)
The projects for which international cooperation is necessary under Article 15 of the Act shall be as follows:
1. Establishment of a collaborative system on the international level for the defense technology security, and the sharing of institutions and policies for technology security;
2. International investigation and research on the technical methods for the defense technology security;
3. International exchanges of professional human resources in the defense technology security;
4. Other matters necessary to promote international cooperation for the defense technology security.
 Article 21 (Education on Defense Technology Security)
(1)  In accordance with Article 16 (1) of the Act, the Minister of Defense Acquisition may educate executive officers and other employees of a target institution, on the defense technology security, covering the following matters, at least once a year:
1. Laws, regulations, and guidelines on the defense technology security;
2. Current status of leakage of defense technology, and response measures including actual response cases, etc.;
3. Other matters recognized as necessary for the defense technology security.
(2) In accordance with Article 16 (2) of the Act, the head of a target institution shall educate its executive officers and other employees on the defense technology security, covering the matters specified in paragraph (1), every year, and submit the results thereof to the Minister of Defense Acquisition Program Administration within 30 days from the completion of education.
(3) The Minister of Defense Acquisition Program Administration may ask the head of a relevant administrative agency or an institution specialized in technology security to provide support for education on defense technology security in order to provide education pursuant to paragraph (2).
 Article 22 (Reward for Defense Technology Security)
(1) The Minister of Defense Acquisition Program Administration shall select a person to be granted rewards or monetary rewards under Article 17 (1) of the Act from among those who file an application following a public announcement or those who are recommended by related institutions. <Amended on Jun. 22, 2021>
(2) Upon receipt of an application or recommendation under paragraph (1), the government shall determine whether or not to give a reward or a monetary reward and the amount to be paid, as prescribed by Ordinance of the Ministry of National Defense, and inform the details of such decision to the relevant applicant or the institution which has made the recommendation within 15 days from the date of the decision. <Amended on Jun. 22, 2021>
 Article 23 (Standards for Imposition of Administrative Fines)
In accordance with Article 24 (1) of the Act, the Minister of Defense Acquisition Program Administration shall impose and collect administrative fines pursuant to the attached Table.
ADDENDUM <Presidential Decree No. 27264, Jun. 28, 2016>
This Decree shall enter into force on June 30, 2016.
ADDENDA <Presidential Decree No. 28211, Jul. 26, 2017>
Article 1 (Enforcement Date)
This Decree shall enter into force on the date of its promulgation: Provided, That among Presidential Decrees amended pursuant to Article 8 of the Addenda, the amended parts of the Presidential Decrees promulgated before this Decree enters into force, but the enforcement dates of which have not arrived, shall enter into force on the dates the relevant Presidential Decrees enter into force, respectively.
Articles 2 through 8 Omitted.
ADDENDA <Presidential Decree No. 29114, Aug. 21, 2018>
Article 1 (Enforcement Date)
This Decree shall enter into force on September 1, 2018.
Articles 2 through 4 Omitted.
ADDENDUM <Presidential Decree No. 31800, Jun. 22, 2021>
This Decree shall enter into force on June 23, 2021.