· What is ISO 27001

ISO/IEC 27001 is the international standard which defines Information Security Management System requirements.

· Necessity

-Reinforcing standards for personal information and security through revision of the ‘Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.
-ISO27001 is expected to improve conformity to statutory and contractual requirements for information security
-Improving the level of practical information security by improving the information security risk management system in accordance with international standards

· Benefit

-Improving business stability through information protection risk management
-Securing information protection legal compliance for ethical and transparent management
-Minimize social and economic damage from infringement accidents and class actions
-Improvement of external image and reliability of information protection when obtaining certification
-Incentives are given when bidding for IT-related government projects