Method of operating an AI-based automatic regulation creation and management platform

Abstract

The present invention relates to a method for operating an AI-based automatic regulation generation and management platform.

Description

Technology Field

[0001] The present invention relates to a method for operating an AI-based automatic regulation generation and management platform. Background Technology

[0002] Modern companies must establish strict internal regulations to maintain information security management systems. However, existing methods for establishing regulations are time-consuming and costly, and the management burden is increasing due to continuous revisions of laws and regulations. Accordingly, the present invention aims to support companies in operating internal regulations more efficiently by developing an AI-based automated regulation generation and management system. The problem to be solved

[0003] The problem that the present invention aims to solve is related to a method for operating an AI-based automatic regulation generation and management platform.

[0004] The problems that the present invention aims to solve are not limited to those mentioned above, and any unmentioned problems that the present invention aims to solve will be clearly understood by a person skilled in the art to which the present invention pertains from the description below. means of solving the problem

[0005] The platform of the present invention for solving the aforementioned problem is an AI-based regulation management system capable of automatically generating and maintaining corporate information protection regulations, and may be characterized by comprising: a regulation automatic generation module that automatically generates appropriate internal regulations by analyzing the corporate operating environment; an AI-based automatic review system that continuously analyzes existing regulations and recommends updates by comparing them with the latest laws and certification standards; a SaaS-based subscription service module provided on a cloud basis and performing continuous service updates; and an information protection and data security module that enhances security by setting customized access rights for each company. Effects of the invention

[0006] According to the present invention, there is an effect of reducing work time and costs by more than 90% compared to the existing manual method (previously taking 1 month → automatically generated within 1 hour).

[0007] According to the present invention, there is an effect of improving corporate credibility by maintaining legal compliance and satisfying the requirements of information security certifications (such as ISMS-P).

[0008] According to the present invention, collaborating with an information security consulting firm has the effect of securing the potential for market expansion and global entry.

[0009] The excellent and / or useful effects according to the present invention are not limited to the effects of the present invention described above, and a person skilled in the art will also be able to obviously recognize, based on the disclosure of this specification, excellent and / or useful effects of the present invention not explicitly disclosed herein, which are intentionally disclosed by this specification and should be understood to be obviously included within the scope of this disclosure. Specific details for implementing the invention

[0010] The present invention will be described in detail below.

[0011] The terms or words used in this specification and claims are not intended to be interpreted as being limited to their commonly accepted dictionary meanings, and a person of ordinary knowledge in the technical field to which this invention pertains will clearly understand that said terms or words are used in the sense of conveying what the invention means within the scope of expressing the concept that this specification and claims obviously intend to convey.

[0012] Furthermore, a person skilled in the art will clearly understand that the embodiments and configurations described in this specification are merely preferred embodiments presented as examples to enable a person skilled in the art to understand and reproduce the present invention, and are not intended to limit the present invention.

[0013] Furthermore, the descriptions and specific embodiments regarding each configuration described in this specification may be obviously applicable to each other descriptions and embodiments. That is, a person skilled in the art will clearly understand that all combinations of the various configurations and specific embodiments disclosed in this specification fall within the scope disclosed by the present invention.

[0014] As used herein, the term 'and / or' is a term comprising each of the mentioned items and all combinations of one or more. Additionally, the singular form includes the plural form unless otherwise noted.

[0015] As used herein, the terms 'comprising' and / or 'comprising' do not exclude the existence or addition of items other than those mentioned.

[0016] In this specification, a numerical range indicated by the term 'to' represents a numerical range that includes the values ​​listed before and after the term as a lower limit and an upper limit, respectively. Where multiple numerical values ​​are disclosed as the upper and lower limits of an arbitrary numerical range, the numerical range disclosed in this specification may be understood as an arbitrary numerical range in which any one of the multiple lower limits and any one of the multiple upper limits are set as the lower limit and upper limit, respectively.

[0017] The terms ‘about’ or ‘approximately’ used in this specification, when used, mean a value or numerical range within 10% of the value or numerical range listed after the said term.

[0018] As used herein, the term "composition" includes a product comprising a specific component in a specific amount and any product directly or indirectly caused by a combination of a specific component in a specific amount.

[0019] Terms or words used in this specification and claims should not be interpreted as being limited to their ordinary dictionary meanings, but should be interpreted in a meaning and concept consistent with the technical spirit of the invention, based on the principle that the inventor can appropriately define the concept of the terms to best describe his invention. Accordingly, the configurations described in the embodiments described in this specification are merely one preferred embodiment of the invention and do not represent all of the technical spirit of the invention; therefore, it should be understood that various equivalents and modifications that can replace them may exist at the time of filing this application.

[0020] Meanwhile, each description and embodiment disclosed in this specification may also be applied to other descriptions and embodiments. That is, all combinations of the various elements disclosed in this specification fall within the scope of the invention, and descriptions omitted in one embodiment may be interpreted in the same manner as described in other embodiments. Furthermore, the scope of the invention should not be considered limited by the specific descriptions provided below.

[0022] The present invention is an AI-based regulation management system capable of automatically generating and maintaining corporate information protection regulations, and may be characterized by comprising: a regulation automatic generation module that automatically generates appropriate internal regulations by analyzing the corporate operating environment; an AI-based automatic review system that continuously analyzes existing regulations and recommends updates by comparing them with the latest laws and certification standards; a SaaS-based subscription service module provided on a cloud basis and performing continuous service updates; and an information protection and data security module that enhances security by setting customized access rights for each company.

[0024] Although preferred embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements by those skilled in the art using the basic concept of the present invention as defined in the following claims are also included within the scope of the present invention.

Claims

Claim 1 An AI-based regulation management system capable of automatically generating and maintaining corporate information protection regulations, characterized by comprising: a regulation automatic generation module that automatically generates appropriate internal regulations by analyzing the corporate operating environment; an AI-based automatic review system that continuously analyzes existing regulations and recommends updates by comparing them with the latest laws and certification standards; a SaaS-based subscription service module provided on a cloud basis and performing continuous service updates; and an information protection and data security module that enhances security by setting customized access rights for each company.