Policy Design Based on Risk at Big Data Era: Case Study of Privacy Invasion in South Korea

This paper has conducted analyzing the accident case of data spill to study policy issues for ICT security from a social science perspective focusing on risk. The results from case analysis are as follows. First, ICT risk can be categorized ´severe, strong, intensive and individual´ from the level of both probability and impact. Second, strategy of risk management can be designated ´avoid, transfer, mitigate, accept´ by understanding their own culture type of relative group such as ´hierarchy, egalitarianism, fatalism and individualism´. Third, personal data has contained characteristics of big data such like ´volume, velocity, variety´ for each risk situation. Therefore, government needs to establish a standing organization responsible for ICT risk policy and management in a new big data era. And the policy for ICT risk management needs to balance in considering ´technology, norms, laws, and market´ in big data era.