Korea Fintech Industry Association Holds "Information Security Officers Council Seminar"

Lectures on IT Audit Guidelines and More

The Korea Fintech Industry Association announced on the 22nd that it held the Information Security Officers Council Seminar at the Seoul International Finance Office in Yeouido, Seoul.

On the 22nd, attendees of the "Information Security Officers Council Seminar" held by the Korea Fintech Industry Association at the Seoul International Finance Office in Yeouido, Seoul, are listening to a lecture. Photo by Pinsanhyeop

The seminar was held under the theme of "Fintech Information Security-Related Legal and Institutional Issues, Including the IT Audit Guideline, and PCI DSS Certification."

Attendees shared the main points of the recently announced IT Audit Guideline, the latest legal and institutional trends related to information security, and practical application cases.

The keynote presentation was delivered by lawyer Kim Dongil from Kim & Chang, who spoke on the topic of "IT Audit Guideline for Strengthening Autonomous Correction Systems."

Kim Dongil addressed the need to strengthen financial institutions' IT operation control capabilities and conduct proactive risk assessments, the operation of a three-stage IT internal control system and implementation of audit procedures, and the procedures for conducting IT audits from a risk minimization perspective.

He stated, "The fintech industry must strengthen its systems for identifying, assessing, and controlling IT risks to establish a preemptive, prevention-focused internal control culture."

The second presentation was given by lawyer Kim Gyejeong from Kim & Chang, who lectured on "Legal and Institutional Issues Related to Fintech Information Security."

Kim Gyejeong introduced the latest trends in digital financial environments and regulation, the most recent supervisory and inspection trends by financial authorities regarding information security, and key legal issues in the event of electronic financial incidents.

She said, "Given the rapidly changing nature of the industry, continuous learning about relevant laws and flexible yet systematic responses based on that knowledge are necessary."

The final presentation was delivered by Lee Jeongmi, Vice President of NTT Data, who explained "PCI DSS Certification and Major Cases."

Lee Jeongmi presented the key concepts and importance of PCI DSS certification, the business drivers for obtaining PCI DSS certification, and the detailed requirements for acquiring the PCI DSS information security standard.

She remarked, "Obtaining international certification is essential for the industry to secure trust in the global payment environment."

A representative of the Korea Fintech Industry Association stated, "The council will continue to seek ways to address information security issues in the industry through future policy forums, seminars, and inter-company exchange events."