The recent large-scale personal information leak that occurred on the Ministry of SMEs and Startups’ ‘Everyone’s Startup’ platform cast critical doubt on the government’s digital security capabilities. It is very shocking that it was not a simple external hacking, but that the AI ​​solution company that participated in the project collected private information without permission by exploiting a loophole in the API response structure. In particular, the lack of follow-up response despite reports of security vulnerabilities already a month before the incident clearly shows the complacent security awareness of government ministries and affiliated organizations. In a situation where more than half of the improvements pointed out in last year's information security audit have not been resolved, the fact that a platform handling sensitive personal information was operated suggests that a fundamental reexamination of the digital management system of public institutions is necessary.

In contrast, private companies are building technological defenses to proactively respond to security threats in the coming era of AI and quantum computing. KT’s recently unveiled ‘E2E Quantum Security’ strategy started from a sense of crisis that existing encryption systems could be incapacitated by the computing power of quantum computers. This is an ambitious blueprint to build an integrated security system that goes beyond simple data encryption and protects the entire life cycle from network transmission to data creation, use, and deletion. In keeping with the era of ‘intelligence of attacks’ where AI is used to automate attacks and detect vulnerabilities, these efforts by companies to gain technological superiority will be an important support for protecting the reliability of the digital ecosystem.

Just as important as technical response is nurturing ‘security talent’ to operate it. The ‘ALEPH’ program, operated by SK Telecom in collaboration with the Korea IT Academy and with support from the Ministry of Employment and Labor, is considered a good example of training practical security talent. Rather than simply memorizing theory, practice-oriented education that directly designs a virtual corporate network environment and responds to infringement incidents is an alternative that can solve the problem of training personnel disconnected from the field. This training course, which combines business cases from large corporations and mentoring, can be evaluated as a strategy to secure a core driving force that will drive the digital transformation era by providing quality employment opportunities for young people and supplying practical talent that can be immediately deployed to companies.

Security is no longer an option, but a necessity for digital survival. The information leak incident caused by the government platform’s negligence in management made us realize once again how vulnerable the ‘basics of security’ are. On the other hand, the quantum security technology and practical talent training ecosystem proposed by telecommunication companies clearly presents the future direction in which we must move. No matter how fast technology develops, if loopholes in the management system are left unattended, any cutting-edge technology will be nothing more than a castle. Therefore, the public and private sectors must cooperate to advance security infrastructure, and a cultural shift that recognizes security as a core value rather than a cost must take precedence.