Krafton said on Thursday it has obtained ISO/IEC 27001 (information security management system) and ISO/IEC 27701 (privacy information management system) international certifications from the British Standards Institution (BSI) across a global integrated scope.

The certifications cover its entire business areas, including game development and publishing. They also cover overall development and operations using artificial intelligence (AI) technologies such as CPC (Co-Playable Character). Krafton obtained the certifications in an integrated scope that includes its headquarters in South Korea and key overseas offices in the United States, Europe, India and Japan.

ISO/IEC 27001 is an international standard that evaluates whether a management system to protect information assets has been established and is being operated. ISO/IEC 27701 is an international standard that verifies safeguards across the entire process of handling personal information. The two certifications are used as key benchmarks for responding to global regulations, including the European Union's General Data Protection Regulation, GDPR.

Krafton said the dual certifications officially recognise its capabilities to manage security and privacy protection in line with global standards. It said they are meaningful in practical terms because the company has not only built systems to respond to each country's regulatory environment, but also expanded the certification scope to overseas offices where game services are operated and user data is processed.

It also applied the same management system to development and operations environments that use AI technologies. Krafton said this demonstrates global security capabilities that maintain consistent information security and privacy protection systems in a changing technology environment.

Hong Seok-beom (홍석범), Krafton's chief information security officer, said: "This certification is the result of objective verification that Krafton, as a global service company, systematically manages information security and privacy protection." He added: "We will continue to place user trust as our top value and steadily advance security systems that meet global standards."