Specific Inquiry Under the Regulation on Supervision of Electronic Financial Transactions, a financial company that uses the public cloud is required to file a cloud computing usage report.A financial company does not, however, report its use to the Financial Supervisory Service in every case merely because it uses cloud computing. The obligation and the absence
Specific Inquiry As permission under the financial supervisory regulations for financial companies to use the public cloud has expanded, there are many issues concerning the cloud computing usage report that financial companies are required to file under the supervisory regulations. In addition, as the Financial Services Commission released the “Improvement Plan for Cloud and Network
Details of the Inquiry What information security considerations apply when developing a new information system or upgrading an existing system?At which stage should information security elements be considered?Introducing some specific cases would be a great help. When a system is developed, information security is considered from the design stage. You need to identify which information
Details of the inquiry I recently became responsible for information protection work, and as the person in charge I wonder what the related laws are.I am worried about whether we are violating related laws while operating paid services on the company’s website and smartphone app.Where and how should we start? If the company does not
Specific Inquiry I have been instructed to establish an annual information protection training plan for the company’s entire organization.How should I approach it? What should be considered in particular? An introduction to cases from other companies would be a great help. A typical procedure for establishing an annual training plan consists of several steps. Training