Security & cloud

Demonstrate the cloud characteristics of your live service

This Korean association scheme checks cloud characteristics and operational reliability using international standards, service demonstrations and vulnerability checks.

Source record updated:

Discuss your certification →

Scope and applicability

KACI cloud service confirmation scheme

Applications are generally voluntary. Check customer or funding requirements; this scheme differs from CSAP and cloud quality and performance verification.

Korean certification schemes and international standards are different. A translated guide does not extend a Korean certificate to other countries. Confirm the target market, product classification and current requirements with the relevant body.

Who this is for

  • SaaS providers demonstrating cloud characteristics
  • IaaS, PaaS and SaaS suppliers asked for confirmation
  • Operators renewing an existing confirmation

Documents to prepare

Application and self-assessment

Document company information and compliance with cloud characteristics.

Service architecture and functions

Prepare feature definitions, the software stack and system diagrams.

Demonstration and testing arrangements

Prepare live demonstrations and consent for URL-based vulnerability checks.

Preparation process

  1. Complete development and self-check

    Review multitenancy, self-service, resource sharing and other criteria.

  2. Apply and undergo assessment

    Complete document review, presentation, demonstration and vulnerability checks.

  3. Receive and renew confirmation

    Plan renewal based on the applicable validity period.

Timing

The operator indicates 6–8 weeks after development is complete; actual service schedules vary and must be agreed after application.

Agency fees

Initial and renewal fees

Initial: KRW 2,500,000 / renewal: KRW 1,500,000

VAT excluded. Confirm current application conditions and validity.

Sources and references ↗

Document automation and management cost KRW 300,000 per month. Expert services and certification body testing or assessment fees are separate. Specify supports preparation; the relevant authority or certification body makes the final decision.

Pricing and certification costs →

Optional expert consulting

Expert review and consulting are optional, separately scoped services. Choose support for Cloud Service Confirmation based on your team's readiness and the evidence or assessment preparation you need.

  • Confirm institutional testing, assessment and registration fees separately in the contract.
  • Development fixes, clinical studies where applicable, security equipment and infrastructure operations may require separate budgets.
  • Confirm internal staffing, travel, translation, VAT, surveillance and renewal costs in the quotation.

Questions and answers

Can this replace CSAP?

No. Association confirmation does not automatically satisfy public sector security requirements.

What are the fees?

Initial confirmation is KRW 2.5 million and renewal KRW 1.5 million, excluding VAT; confirm application conditions.

Can a service still in development be assessed immediately?

The indicative schedule assumes development is complete and the service can be demonstrated and tested.

Sources and references

Related guides