SK Telecom Releases 2025 Information Security White Paper

SK Telecom has published its 'Information Security White Paper 2025,' a comprehensive document detailing the company's commitment to safeguarding customer information and trust in an era of escalating cyber threats. The white paper, released on July 1, 2026, serves as a public declaration of the company's security and personal information protection activities.

The publication is structured into three main sections: information security governance, information security architecture and technology, and personal information protection. This framework provides a clear overview of SK Telecom's operational direction across all aspects of security and privacy. The company has also established an information security innovation plan, identifying and implementing 257 specific tasks to enhance its security posture.

“

This white paper was prepared to share SK Telecom's perspective and direction on information security. What is most important is to go a step further than simply introducing current measures and ensure these efforts operate without wavering in actual work and service environments.

Highlighting a shift in approach, the white paper connects information security not merely to individual technical tasks but to the entire enterprise's execution system. It addresses the expanding scope of security responsibilities driven by advancements in AI, cloud computing, and supply chain management, offering insights into how businesses can effectively respond to these evolving standards and frameworks.

Lee Jong-hyun, SK Telecom's Chief Information Security Officer (CISO) and head of the Integrated Security Center, stated that the white paper aims to share SK Telecom's perspective and direction on information security. "What is most important is to go a step further than simply introducing current measures and ensure these efforts operate without wavering in actual work and service environments," he said. He further committed to integrating security principles into management decisions, service operations, and customer communications, promising continuous improvements.

“

As the Chief Information Security Officer, I will not limit security to a response at a specific point in time or a task for a specific organization. I will ensure that security principles are consistently applied across management decision-making, service operations, and customer communication, and I will continue to make necessary improvements.