Goryeo Gift Strengthens Customer Data Protection After Securing ISMS Certification

Goryeo Gift, a company specializing in promotional goods and merchandise, has passed its final review for Information Security Management System certification, the company said on Oct. 7.

The ISMS program assesses whether an organization’s information-security management system meets established certification standards. The review covers security-policy development, risk management, personnel and physical security, access controls, and incident response.

Goryeo Gift met 80 requirements during the review: 16 concerning the establishment and operation of its information-security management system and 64 covering protective measures. The standards were set under notices issued by South Korea’s Ministry of Science and ICT and Personal Information Protection Commission.

The company said it would use the certification as an opportunity to continue improving its security framework. It plans regular inspections of security systems, corrective action for vulnerabilities and risks, stronger protection for customer personal information and corporate transaction data, improved internal procedures, and expanded employee training to raise security awareness.