Hyundai Card Receives 'International Standard' Certification for Compliance Policy and Risk Management

ISO37301 (Compliance Management System) Certification Obtained

[Asia Economy Reporter Ki Ha-young] Hyundai Card announced on the 6th that it has obtained official certification for its Compliance Management System (ISO37301) from the global certification body Lloyd's Register Quality Assurance (LRQA).

'ISO37301' is an international standard established by the International Organization for Standardization (ISO) in April of this year. It is awarded by evaluating whether a company's compliance policies and risk management meet global standards and are effectively operated.

Recently, as global interest in sustainable development and ESG (Environmental, Social, and Governance) management has increased, the importance of ISO37301 is gradually growing due to rising demands for responsible investment and transparent information disclosure reflecting non-financial factors such as environment, society, and governance.

With this certification, Hyundai Card has been recognized for the results of various activities it has undertaken to establish a culture and system of compliance management. It means that the process of identifying and preventing compliance risks that may occur during work and the operation method have been internationally certified.

Hyundai Card laid the foundation for compliance management in Korea by establishing an internal control system related to employee code of conduct, asset management, consumer protection, and information management in 2001, when the term compliance management was still unfamiliar, and by implementing the compliance officer system.

The company has also made various efforts to internalize compliance management among its employees. Every year, it conducts mandatory compliance and information security training for all employees and shares quarterly compliance monitoring status through compliance officers appointed in each department.

In addition, since 2003, Hyundai Card has introduced a zero-tolerance policy regarding customer information protection, transaction transparency with partner companies, and prohibition of collusion, encouraging employees' compliance activities. It also actively operates various channels for raising concerns (whistleblowing), such as the Internal Control Committee (CRB), Cyber Audit Office, external reporting hotline, and Ombudsperson system, receiving positive responses.