KB Financial Group to Implement Voluntary Information Security Disclosure in the First Half of the Year

Proactive Response to Legal and Regulatory Changes by 2027

Pre-Disclosure Consulting from Korea Internet & Security Agency

Strengthening Group-Wide Integrated Governance System

KB Financial Group announced on April 21 that it will implement voluntary information security disclosures within the first half of this year, as a proactive measure to respond to changes in information protection laws and regulations, as well as the strengthening trend of ESG (Environmental, Social, and Governance) disclosures. This initiative aims to enhance financial consumer protection ahead of the enforcement ordinance of the Information Security Industry Act, which is currently being revised with implementation targeted for next year.

KB Financial Group in Yeouido, Seoul. Photo by Jinhyung Kang aymsdream@

Information security disclosure under the law is a system that makes public a company's information security investments, personnel, certifications, and operational status. While financial firms are not currently required to disclose this information, they may be classified as mandatory disclosers if the enforcement ordinance is amended in the future. Through this voluntary disclosure, KB Financial Group plans to transparently reveal the group's information security status and establish information security as a core element of corporate management.

KB Financial Group is scheduled to receive a "pre-disclosure consulting on information security" from the Korea Internet & Security Agency (KISA), which operates the comprehensive information security disclosure portal. Through the consulting, the group will receive training on the standards and methods for producing data by disclosure category and will further refine its management system.

KB Financial Group explained that this voluntary information security disclosure is significant because it goes beyond simple legal compliance. The group is recognizing information security as a non-financial risk management factor in the ESG management S (Social) and G (Governance) areas, and is taking measures to establish the necessary disclosure level and management system.

In addition, starting this year, KB Financial Group has reorganized its information security and related management system under the holding company's compliance officer, enabling a more systematic approach from the perspective of internal control and compliance management. The group plans to share pre-disclosure consulting results and practical know-how accumulated during this disclosure preparation process with its subsidiaries, thereby uniformly strengthening the group’s information security capabilities. The aim is to minimize differences in information security management levels among subsidiaries and reinforce group-wide integrated governance and responsible management systems.

A KB Financial Group representative stated, "Information security disclosures are an important means of transparently demonstrating a financial company's internal control level and information security management capabilities to users and the market," adding, "We will continue to strengthen the foundation of trust for financial consumer protection across the group, taking into account the comprehensive factors such as amendments to the law."

This content was produced with the assistance of AI translation services.