SK Shielders Publishes 'Personal Information Protection Guide'

Measures to Protect Personal Information Against Increasing Data Leaks and Breaches

[Asia Economy Reporter Kim Cheol-hyun] SK Shieldus (CEO Park Jin-hyo) announced on the 17th that it will publish a personal information protection guide to establish a safe personal information protection system for companies.

As the fields utilizing personal information have recently increased, interest in the safe use and protection of personal information is growing. Furthermore, if the Personal Information Protection Act is amended, companies may be fined up to 3% of their total sales in case of personal information leakage or infringement, making thorough security management necessary.

Accordingly, this guidebook comprehensively covers the personal information protection management system of companies, from technical elements such as servers and databases that must be managed when handling personal information, to administrative measures such as personal information protection organizations and systems, and physical measures such as access control. The importance of each element is divided and explained in detail, and inspection methods are organized so that company security officers can conduct self-assessments.

In particular, detailed descriptions of how to set security policies and inspection methods for each area are provided to respond to internal and external threats to personal information processing systems and to meet information protection and personal information protection management system certifications. It also presents mobile device software management plans containing personal information processing policies for frequently used mobile devices, as well as physical measures to ensure the safety of personal information access.

Choi Myung-gyun, Head of CS Business Division at SK Shieldus, said, "Personal information management is directly linked to corporate trust, and a systematic security strategy is essential," adding, "SK Shieldus will continue to support mid-sized and small enterprises lacking expertise and personnel in personal information protection and cybersecurity by enabling self-assessment and preparation of response measures through the guidebook while practicing ESG management."