en.Wedoany.com Reported - On July 13, South Korea's SGA Solutions announced its participation in the "2026 National Cybersecurity System Introduction Support Project" promoted by the Korea Internet & Security Agency. It will join three of the six selected consortia, focusing on building identity authentication, terminal management, and access control systems around the existing office networks of public institutions. The implementation targets this time include the Ministry of Climate, Energy and Environment, the Korea Electric Power Knowledge Data Network Company, the Ministry of Gender Equality and Family, and the Korea Real Estate Board. The construction emphasis is on integrating new security control mechanisms into real office environments, rather than remaining at the stage of plan design or technical testing.
The core change is that the security boundary of South Korea's public networks will no longer rely entirely on physical isolation between internal and external networks.
The National Cybersecurity System (N2SF) implements differentiated management of access rights based on the importance of business data, usage scenarios, and user and terminal risks. Compared to the past method of uniformly separating internal office networks from the internet, the new system needs to further identify "who is accessing, what terminal is being used, what type of data is being accessed, and what operations can be performed," and then decide whether to allow, restrict, or block access based on the risk level. When South Korean public institutions subsequently use external cloud services, generative artificial intelligence, and internet business tools, they will also reduce the risks of data leakage and unauthorized operations through identity verification, permission configuration, and access control.
SGA Solutions' work focuses on the authentication entry points and access links.
According to the implementation plan, the company will build user authentication and terminal management mechanisms based on a unified identity and access management system. Through integration with a single sign-on system and an access control platform, it will uniformly manage the connection relationships among public institution personnel, office terminals, and application services. User login does not mean direct access to all business systems; the system must also make judgments based on account permissions, device status, and the target of access, thereby extending identity authentication from a one-time login step to the entire business access process.
The office scenarios corresponding to the three consortia are different.
The project for the Ministry of Climate, Energy and Environment and the Korea Electric Power Knowledge Data Network Company, led by Korea PrivateTech, will focus on building for application environments involving external cloud business collaboration and the combination of public data with external AI services. SGA Solutions will collaborate with companies such as Korea KT, Enki WhiteHat, and AI Spera to embed identity authentication, terminal identification, and access permission control into cloud service and AI invocation processes. The key focus is on addressing issues such as how to confirm user identity, whether terminals are trustworthy, and how to limit the scope of access when public data leaves the traditional closed office network.
The project for the Ministry of Gender Equality and Family is led by Wins Technet. The construction scenario includes the use of generative AI in the office environment and office terminals accessing the internet. Such applications require establishing a finer security control layer between open network services and internal business data to prevent staff from directly taking sensitive information out of the controlled environment while using network tools. In this project, SGA Solutions will provide account, identity, and terminal management capabilities, and cooperate with other security products to form a continuous control chain from user login and device confirmation to application access.
The third project falls under the Korea Real Estate Board.
This consortium is led by Hunesion, with participation from PrivateTech, SGA Solutions, ClumL, and Enki WhiteHat. It mainly verifies the use of generative AI in the office environment and the security management methods when office terminals connect to the internet. After project implementation, whether a staff member can access a specific internet service, which business data they can invoke, and through which terminal they operate will no longer be determined solely by the network's location, but jointly by identity, permissions, device, and data classification.
From the perspective of actual construction content, this round of projects is not simply about purchasing a set of cybersecurity software. Instead, it requires connecting and modifying the existing account systems, office terminals, single sign-on platforms, business systems, and access control devices of public institutions. The unified identity and access management platform first needs to sort out personnel accounts and permission relationships. The terminal management system is responsible for identifying connected devices. Single sign-on completes identity transfer between different business applications. The access control platform then restricts the systems and data scope users can enter based on established rules. If any link fails to interact accurately, problems such as mismatched account permissions, inability to identify terminal status, or failure of application access control may occur.
The project is scheduled to continue until December 11, 2026. During the construction period, each consortium needs to complete the development, deployment, application verification, and operational support of the relevant information service models, and make adjustments based on the original network architecture, business systems, and security policies of different institutions. After the project ends, the relevant consortia must continue to manage the construction outcomes and cooperate with subsequent security reviews. This means the work covers not only system launch but also operational verification, policy optimization, and continuous maintenance.
As the three projects enter the implementation phase, South Korea's National Cybersecurity System will further transition from pilot verification to the real business environments of public institutions. Unified identity management, terminal trust checks, single sign-on, dynamic access control, and AI usage security will become the main technical aspects of these project implementations. They will also test whether the new security system can establish a stable boundary between open internet services and public data protection.
