KOTRA Acquires Two International Information Security Certifications: "Enabling Secure Export Support"

Recognition of Information Security Standards Amid AI Security Threats
"We Will Strengthen Personal Information Protection Systems"

KOTRA (Korea Trade-Investment Promotion Agency) has obtained two types of international certifications granted to organizations equipped with systems for managing information security risks.

On June 1, KOTRA announced that it had simultaneously acquired the international standards ISO 27001 (Information Security Management System) and ISO 27701 (Personal Information Management System) certifications.

ISO 27001 is awarded to organizations that have systems in place to continuously manage information asset security risks, while ISO 27701 is granted to organizations that have established frameworks to comply with both domestic personal information protection laws and the European General Data Protection Regulation (GDPR) throughout all stages of personal information processing.

Jung Hoon Lee, Vice President of KOTRA (Korea Trade-Investment Promotion Agency) and Head of the Digital Trade Investment Division (third from the left), along with KOTRA officials, are taking a commemorative photo after obtaining ISO certification. KOTRA.

KOTRA stated, "By obtaining these two international certifications simultaneously, KOTRA has been officially recognized for meeting stringent global standards in information security and personal information protection as an export support platform for small and medium-sized enterprises." The agency added, "This achievement is especially significant as it establishes a secure foundation for export support at a time when AI-related security threats are becoming more prominent and major domestic and international cyber threats are on the rise."

Kang Kyungseong, President of KOTRA, emphasized, "This certification is an important milestone that proves KOTRA's commitment to information security and personal information protection," and added, "We will continue to strengthen our information security level and personal information protection systems in the future."