Samsung Electronics Service said on Monday it obtained ISMS-P certification, short for the Information Security and Personal Information Protection Management System, for the first time in South Korea’s electronics product service industry.
ISMS-P is an integrated certification system for information security and personal information protection overseen by the Ministry of Science and ICT and the Personal Information Protection Commission. An accredited assessment body reviews a company’s security management framework and overall certification system, and the Korea Internet & Security Agency and the Financial Security Institute make the final decision after deliberation.
To receive certification, a company must pass conformity assessments for a total of 101 items, including establishing and operating an information security management system, managing system security, and protection measures by stage of personal information processing.
Samsung Electronics Service first obtained ISMS certification in 2021 for 6 systems, including its website and chatbot. It later expanded the certification scope in 2024 to include sign-language consultations and its recruitment site, and this year it obtained ISMS-P certification, which strengthens the personal information protection area, expanding its security management system in stages.
It is also continuously running information security training for all employees, simulated malicious email drills and security inspections at service centers. It plans to strengthen its information security management system to provide services customers can entrust with confidence.
A Samsung Electronics Service official said, "Obtaining ISMS-P certification is meaningful in that we expanded the certification scope to the personal information area," adding, "We will continue to make efforts so customers can use Samsung Electronics products with confidence."