Samsung C&T Fashion Division, Industry's First to Re-Certify 'ISMS-P'

[Asia Economy Reporter Eunmo Koo] Samsung C&T Fashion Division announced on the 12th that it has become the first in the domestic fashion industry and shopping malls overall to reacquire the ISMS-P integrated certification from the Korea Internet & Security Agency (KISA) under the Ministry of Science and ICT.

The ISMS-P integrated certification is valid for three years after acquisition, and the certification must be maintained by passing annual follow-up audits during the validity period. Samsung C&T Fashion Division was the first in the industry to receive re-certification since obtaining the ISMS-P integrated certification in 2019.

Notably, Samsung C&T Fashion Division’s fashion and lifestyle specialty mall SSF Shop, as well as Tory Burch online mall, official website, and SFDF (Samsung Fashion Design Fund) site, were recognized by an authoritative institution for customer information protection and service stability across all online services and operations.

For this re-certification, Samsung C&T Fashion Division focused on strengthening platform security and preventing security incidents. Since 2019, it has established and continuously maintained a system through SeCaaS security monitoring and automated cloud inspections. Through SeCaaS security monitoring, it has defended against approximately 2.2 million hacking attacks annually, including DDoS (Distributed Denial of Service) attacks. Based on automated cloud inspections, it monitors and addresses vulnerabilities in the constantly changing cloud environment, providing safe services against external attacks and thoroughly protecting customer personal information.

The ISMS-P integrated certification combines the previously separate information security management system certification and personal information protection certification into one of the highest-level information security and personal information protection management system certification schemes in Korea. According to the Network Act, it rigorously examines whether the information security management system established, managed, and operated by companies to protect customer information meets the certification standards. To obtain ISMS-P certification, companies must pass conformity evaluations for a total of 102 certification criteria, reflecting 80 security requirements related to information security and 22 related to personal information.

Kiho Choi, Chief Privacy Officer (CPO) of Samsung C&T Fashion Division, said, “Since acquiring the ISMS-P certification as the first in the fashion industry and shopping malls overall, we have solidified our position as a leading company by receiving re-certification. Samsung C&T Fashion Division will continue to take the lead in building a safe and sound online shopping environment from the customer’s perspective and will do its best to provide the best purchasing experience based on convenience and ease of use.”