Two Toss Affiliates Consecutively Obtain International Security Standard Certifications

Toss CX and Toss Insurance Each Obtain ISO/IEC Certification

[Asia Economy Reporter Minwoo Lee] Toss CS (Customer Service Center), Toss Insurance, and other subsidiaries of the mobile financial platform Toss have obtained international standard security certifications.

Toss operator Viva Republica announced on the 25th that Toss CS and Toss Insurance have acquired these security certifications.

The security certifications obtained by the two companies are ISO/IEC 27001 (Information Security Management System) and 27701 (Privacy Information Management System). These standards are established by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), with certification audits conducted by the British Standards Institution. Notably, Toss CX, which is in charge of Toss's call center operations, is the first domestic customer service company to simultaneously acquire certifications for both information security and privacy information management systems.

Toss subsidiaries have been obtaining ISO information security certifications annually since 2020. Last year, Toss Payments and Toss Securities received certifications, and this year, Toss CX and Toss Insurance have also obtained them. Toss Bank is also pursuing certification acquisition this year.

Investment in security is steadily ongoing. Of Toss's IT investment of 43.2 billion KRW last year, 6 billion KRW (14.1%) was allocated to information security. The proportion of dedicated information security personnel among the total workforce is about 5.3%, which is more than five times higher compared to commercial banks. Toss is also the only company in the industry to disclose the scale of investment and personnel in information security for the past four years. Toss's security technology team participated in 'FIESTA2021,' the only domestic financial security hacking competition last year, and was the only team among 156 participants to solve all problems, securing first place.

A Toss representative said, "This achievement is an objective recognition of Toss's overall efforts in the fields of security and privacy protection," adding, "It is especially meaningful that the insurance and customer service subsidiaries, which handle many individual customer interactions, have been evaluated for their high-level information security capabilities."

This content was produced with the assistance of AI translation services.