KISA, First ICT Public Institution to Obtain Norm-Based Management System Certification

International Organization for Standardization's 2021 International Standard
Certified as operating at a global level
"We will do our best to meet public trust"

The Korea Internet & Security Agency (KISA) announced on the 1st that it has become the first domestic ICT public institution to obtain certification for the Compliance Management System (ISO 37301). The Compliance Management System is an international standard established by the International Organization for Standardization (ISO) in April 2021. This system officially certifies that an institution’s compliance policies and risk response systems, including laws, regulations, and guidelines, are established and operated at a global standard.

At the KISA Compliance Management System (ISO 37301) certification ceremony, KISA Director Lee Won-tae (left) and Korea Management Certification Institute CEO Hwang Eun-joo (right) are posing for a commemorative photo. Photo by KISA

In July of this year, KISA held a joint labor-management Compliance Management Policy declaration ceremony and made company-wide efforts to internalize a fair and transparent organizational culture by identifying and controlling compliance obligations and risks by department. The acquisition of this certification can be seen as a result reflecting these efforts.

Going forward, KISA plans to continuously check and control various institutional risks through the Compliance Management System, while promoting ethical culture both internally and externally by conducting contests for improving systems in vulnerable areas of ethics and human rights, as well as compliance and ethics week campaigns.

Lee Won-tae, President of KISA, stated, “KISA will expand employee education and continuously monitor compliance to ensure that the Compliance Management System we have established is stably operated and settled within the institution.” He added, “Furthermore, we will do our best to meet public trust by continuously identifying inherent risks and enhancing control activities to strengthen compliance and ethical management.”

This content was produced with the assistance of AI translation services.