KB Healthcare Obtains KISA Information Security Management System Certification

KB Healthcare, a subsidiary of KB Insurance, announced on March 4 that it has obtained the 'Information Security Management System (ISMS)' certification from the Korea Internet & Security Agency (KISA), which operates under the Ministry of Science and ICT.

The ISMS certification is a nationally recognized system that assesses whether a company has an appropriate management framework in place to protect its information assets. KB Healthcare passed all 80 criteria and 300 detailed inspection items, including 16 for the establishment and operation of the information security management system and 64 for protection measures requirements.

The certification scope covers all healthcare services provided by KB Healthcare, including the health management platform 'KBOcare', corporate health check-ups, and health management. This certification will remain valid for the next three years.

Because healthcare services handle sensitive personal health information, a high level of information protection is required. Taking this certification as an opportunity, KB Healthcare has enhanced its company-wide information security management system by minimizing data leakage risks and upgrading its response framework for security incidents.

This ISMS certification is significant as it officially verifies KB Healthcare's capabilities in protecting health data in preparation for the expansion of the medical MyData environment. In such an environment, the safe and integrated management of various health information, including corporate health check-up data, follow-up management information, and personal medical histories, is crucial.

Based on this certification, KB Healthcare plans to gradually build a structure that enables corporate clients to use data with confidence, and will also pursue the ISMS-P (Information Security and Personal Information Management System) certification in the future.

A KB Healthcare representative stated, "This ISMS certification demonstrates that we have established an information protection management system throughout our core business areas," and added, "We will continue to strengthen the service environment so that customers can use our services with confidence."

This content was produced with the assistance of AI translation services.