Home&Shopping Secures Credibility in Information Security and Personal Data Protection Management System

Passed the Second Follow-up Audit of the Information Security and Personal Information Protection Management System Certification

Home&Shopping announced on the 17th that it has passed the second follow-up audit of the ‘Information Security and Personal Information Protection Management System Certification (ISMS-P),’ enabling it to take a leading role in protecting customers.

ISMS-P is a top-level security management system in Korea, jointly overseen by the Ministry of Science and ICT and the Personal Information Protection Commission under the ‘Notification on Information Security and Personal Information Protection Management System Certification, etc.’ It focuses on thoroughly inspecting whether a system is established to develop and operate management procedures to protect key information assets from various security threats, as well as physical, technical, and administrative protection measures.

To obtain this certification, an audit must be passed on a total of 102 certification criteria across different areas. ISMS-P qualification is maintained for three years after certification acquisition, during which two follow-up audits are conducted to review whether the certification should be maintained. Home&Shopping first obtained the certification in 2020, passed the renewal audit in March 2023, and underwent the second follow-up audit last October. As of February 12 this year, it received approval to maintain the certification from the Korea Internet & Security Agency. With this, Home&Shopping has maintained its ISMS-P certification qualification for six consecutive years since the integration of the certification. Considering the initial ISMS certification acquisition in 2013, the total holding period is 12 years.

A Home&Shopping official stated, “Due to the nature of the home shopping industry, we are always aware of the importance of customer data and continuously invest and strive to protect customers’ personal information,” adding, “We will continue to do our best to safely maintain and protect customer information.”