[Asia Economy Reporter Lee Jung-yoon] Shinhan Financial Investment announced on the 12th that it is the only company in the industry to have registered voluntary information security disclosures as of the end of last year on the comprehensive information security disclosure portal.


Information security disclosure is a disclosure system that provides stakeholders such as consumers, customers, citizens, shareholders, and corporate affiliates with the status of a company's information security investments, personnel, certifications, etc., in accordance with the Information Security Industry Promotion Act, thereby enhancing corporate information security responsibility and credibility. It has been mandatory for 598 companies starting this year.


Although public institutions and financial companies are exempt from mandatory information security disclosure, Shinhan Financial Investment voluntarily disclosed its information security investment status, the only one in the securities industry to do so.


According to this disclosure, as of December last year, Shinhan Financial Investment invested 15.9 billion KRW, accounting for 8.2% of the total IT sector investment of 194.6 billion KRW. The dedicated information security personnel numbered about 29, representing 12.2% of the total IT personnel (about 238).


Meanwhile, Shinhan Financial Investment operates an industry-leading information security system, having obtained ISMS-P (Information Security and Personal Information Protection Management System Certification), ISO/IEC27001 (International Standard Information Security Management System Certification), BS10012 (International Standard Personal Information Protection Management System Certification), the highest grade in continuous information security evaluation, received commendation from the Financial Information Security Association, and completed the CISO advanced course at the Financial Security Institute. Additionally, it was designated as an excellent company in information security investment in the electronic disclosure system.


Furthermore, Shinhan Financial Investment operates 27 major information security activities including ▲ membership in the Financial Security Institute (delegate), ▲ annual security vulnerability analysis/evaluation, ▲ information security de-identification processing and vulnerability history management, and ▲ establishment of EDR solutions.



Jung Byung-ki, Chief Information Security Officer of Shinhan Financial Investment, stated, "We conducted voluntary information security disclosure to lead ESG (Environmental, Social, and Governance) management and information disclosure in the financial sector," adding, "We will firmly operate an information security management system to guarantee customers' right to know and enhance trust, and take the lead in activating information security investments."


This content was produced with the assistance of AI translation services.

© The Asia Business Daily(www.asiae.co.kr). All rights reserved.

Today’s Briefing