Personal Data Protection Training, Data Leak Prevention Measures and Insurance

「In addition, as the foundation for company-wide information security, the Group has established an Information Security Basic Policy and applies it to all employees, including officers, and all information assets it holds.」

「The Group has also established an Information Asset Management Committee chaired by the executive officer responsible for information asset management. Based on its information asset management rules, the committee establishes and promotes a company-wide information asset management framework and conducts drills for serious information asset incidents. If a serious information asset incident occurs, the Group will establish ALSOK-CSIRT (Computer Security Incident Response Team), and has put in place a framework to respond appropriately from incident management through the consideration and implementation of measures to prevent recurrence.」

「Accordingly, the Group works to ensure thorough management of customer information by implementing necessary and appropriate measures to prevent the leakage, loss or damage of personal data, including employee training on regulations such as the Act on the Protection of Personal Information and oversight of outsourced service providers.」

「Accordingly, the Group is working to thoroughly manage customer information by providing employees with training on personal data protection, supervising outsourced service providers, and taking necessary and appropriate measures to prevent the leakage, loss or damage of personal data. In addition, to prepare for a possible incident, the Group has taken out cyber risk insurance, a commercial package policy covering Group companies.」

「Accordingly, the Group is working to thoroughly manage customer information by providing employees with training on personal data protection, supervising outsourced service providers, and taking necessary and appropriate measures to prevent the leakage, loss or damage of personal data.」