부서 · 기구

Five directorates. One uninterrupted watch.

No single device constitutes a secure institution. The Bureau requires mutually supporting safeguards, verified responsibilities and restoration capacity throughout the service lifecycle.

Directorates 5 Specialist unit K-9 Personnel 4,120 Watch Continuous

Defence in successive layers / 다층방어

Accountable physical custody

Facilities shall maintain controlled entry, recorded maintenance visits and clear custody of equipment. Server halls and cable routes require scheduled inspection, with CHONGMU teams assigned where appropriate. Any physical anomaly must be referred to qualified personnel before equipment is returned to ordinary service.

Verified identity and authority

Access shall correspond to an assigned duty and a documented approval. Shared privileged credentials are prohibited except under formally controlled emergency arrangements. Responsible officers review dormant accounts, administrative rights and contractor access, recording removal decisions and confirming that departing personnel no longer retain access.

Controlled network boundaries

Institutions shall document network zones and permit only approved communication between them. Boundary changes require review, a restoration plan and verification after implementation. Routing observations and gateway records are examined together so that apparent service normality does not conceal an unauthorized alteration of network pathways.

Observed and maintained systems

System owners shall retain useful security records, synchronize approved time sources and maintain an inventory of supported software. Updates are assessed in representative environments before deployment. Unusual events receive a named reviewer, an initial assessment and a deadline for resolution or further authorized investigation.

Recoverable essential services

Recovery arrangements shall include protected copies, known restoration dependencies and personnel authorized to declare service readiness. Exercises must demonstrate restoration rather than merely confirm that backup tasks completed. Lessons are entered into corrective registers and checked at subsequent inspections until responsible officers verify their closure.

Directorates and unit제1국 — 제5국 · K-9

CYB-01

First Directorate — Perimeter Defence

제1국 경계방어

The First Directorate supervises approved network boundaries and the disciplined review of external connections. Its analysts examine routing changes, gateway health and access records, directing containment through established authority while preserving the continuity of essential communications and the evidence required for subsequent review.

Boundary configuration review
Routing anomaly assessment
Authorized containment coordination

CYB-02

Second Directorate — Critical Infrastructure

제2국 중요하부구조

The Second Directorate coordinates protective standards for essential operating environments. It emphasizes separation of administrative and control functions, supervised maintenance and tested restoration arrangements. Provincial institutions submit readiness findings through designated channels, with priority given to conditions affecting physical safety and dependable public service.

Essential service continuity
Maintenance risk assessment
Recovery exercise supervision

CYB-03

Third Directorate — Threat Intelligence and Analysis

제3국 위협정보분석

The Third Directorate evaluates reported anomalies and prepares assessed warnings for authorized recipients. It distinguishes confirmed observations from preliminary indications, correlates institutional reports and issues defensive recommendations. Its products support measured decisions and the correction of exposed conditions without substituting speculation for verified technical evidence.

Incident report correlation
Defensive indicator assessment
Technical bulletin preparation

CYB-04

Fourth Directorate — Cryptography and Secure Communications

제4국 암호 및 보안통신

The Fourth Directorate establishes requirements for protected communications, credential custody and cryptographic lifecycle management. It reviews certificate validity, approved protocol settings and recovery arrangements for entrusted keys. Institutions remain responsible for implementation and shall report exceptions before they become interruptions to essential communications.

Certificate lifecycle oversight
Protected channel standards
Key custody inspection

CYB-05

Fifth Directorate — Cadre Training and Doctrine

제5국 간부양성 및 교범

The Fifth Directorate develops instruction, qualification reviews and operational doctrine for Bureau personnel. Training joins technical competence with exact reporting and collective discipline. Exercises evaluate decisions, handovers and restoration work, ensuring that lessons become revised procedures rather than remaining statements in an exercise report.

Cadre qualification programmes
Readiness exercise evaluation
Doctrine and procedure revision

CYB-06

K-9 Biological Anomaly Detection Unit

생물학적이상탐지분대

Operating under callsign CHONGMU, the unit provides canine olfactory-acoustic inspection of accessible physical infrastructure. Handler teams examine server halls, cable trenches and perimeter ducts for conditions requiring technical verification. Findings supplement instrument readings and access records; they do not replace electrical inspection or authorized personnel identification.

Overheated insulation detection
Ozone anomaly indication
Unauthorized presence screening

Unit K-9생물학적이상탐지분대

Callsign CHONGMU · 충무

Biological anomaly detection

CHONGMU is a canine olfactory-acoustic sensor platform assigned to physical layer inspection of server halls, cable trenches and perimeter ducts. Trained handler teams detect indications of overheated insulation, ozone from arcing equipment and unauthorized personnel. Each indication is recorded with its location and referred for verification by the appropriate technical or security officer. Deployment follows facility safety requirements and controlled access procedures. The unit is an operational inspection capability, not a mascot, and its findings supplement instrument measurements, maintenance records and access control evidence.

Unit standing orders →

Callsign / 호출부호: CHONGMU / 충무
Inspection domain / 검사지역: Server halls, cable trenches and perimeter ducts
Detection tasks / 탐지과업: Overheated insulation, ozone from arcing equipment and unauthorized personnel
Reporting standard / 보고기준: Handler-recorded indication followed by technical or security verification

Note to inspecting officers

An indication by the unit is an observation, not a conclusion. It shall be recorded, located and referred for technical or security verification before action is taken on the equipment.