SMCC WG9: Expanding Cybersecurity Collaboration in South Korea & Standardized Semiconductor Cyber Assessment (SSCA): A Unified Approach to Supply Chain Security

3:20 pm - 3:45 pm

#1: SMCC WG9: Expanding Cybersecurity Collaboration in South Korea

The Semiconductor Manufacturing Cybersecurity Consortium (SMCC) has expanded its global footprint with the creation of Working Group 9 (WG9), dedicated to addressing cybersecurity challenges unique to South Korea’s semiconductor ecosystem. Formed through collaborative efforts among leading device makers, equipment OEMs, and solution providers, WG9 emerged after a series of strategic CISO meetings and industry forums, leading to its official kickoff in mid-2025.

WG9’s mission is to understand local cybersecurity risks, align with global standards, and operationalize compliance with SEMI frameworks such as E187 and E191. The group will coordinate with other SMCC working groups to develop region-specific strategies for supply chain security, regulatory readiness (including EU CRA), and awareness programs. By fostering collaboration among Korean semiconductor leaders and integrating global best practices, WG9 aims to enhance resilience and ensure secure manufacturing environments across the industry.

#2: Standardized Semiconductor Cyber Assessment (SSCA): Advancing Supply Chain Cybersecurity

The semiconductor industry faces growing cybersecurity challenges across complex global supply chains. Current practices rely on fragmented, inconsistent supplier assessments, creating inefficiencies and gaps in risk management. To address this, the SEMI Supply Chain Cybersecurity Working Group (SMCC WG3) has developed the Standardized Semiconductor Cyber Assessment (SSCA) framework — a unified, standards-based approach inspired by best practices from the automotive sector’s TISAX (Trusted Information Security Assessment Exchange) model.

SSCA introduces a common question bank focused on three critical domains: Cyber Resilience, IP Protection, and Product Security, tailored to semiconductor-specific needs. The framework enables suppliers to complete a single, comprehensive assessment, reducing redundant audits and improving transparency. Key deliverables include a multilingual questionnaire, a standardized auditing process, and a mechanism for secure result sharing across industry stakeholders.

By harmonizing assessment criteria and fostering collaboration, SSCA aims to significantly reduce supply chain cybersecurity risks, accelerate adoption of best practices, and enhance overall resilience. This session will outline SSCA’s development journey, scoring methodology, and practical steps for industry-wide implementation.

Featured Speakers

Suk Won Kang

Director Information Security, Applied Materials

Suk Won Kang is a seasoned information security leader with over 25 years at Applied Materials, where he plays a pivotal role in safeguarding the company’s global operations. As Director and Asia Information Security Officer, Suk Won combines deep technical expertise with strategic vision to drive robust security programs across diverse business environments.

He has extensive experience in IT infrastructure, security management, and intellectual property protection, enabling him to design and implement secure solutions that align with business objectivesand customer requirements. Suk Won is instrumental in managing security risks during complex corporate activities such as mergers, acquisitions, and divestitures, ensuring seamless integration while maintaining compliance and resilience.

He oversees critical audit programs, including ISO 27001 and NIST Cybersecurity Framework assessments, supplier security evaluations, and responses to customer and government audits. His proactive approach ensures regulatory compliance and fosters customer confidence in Applied Materials’ security capabilities.

Suk Won holds a Bachelor of Science in Chemistry from Hanyang University and maintains globally recognized certifications, including CISSP, CISA, CISM, and GPEN, reflecting his commitment to professional excellence and continuous learning.