Lemonbase , a performance management solution company, announced on the 31st that it has obtained Information Security Management System (ISMS) certification in recognition of the stable operation of its security system to protect customers' personal information.
ISMS certification is the highest level of information security certification system in Korea, certified by the Korea Internet & Security Agency (KISA) according to the joint notice of the Ministry of Science and ICT and the Personal Information Protection Commission. Certification is granted by comprehensively evaluating the information security management procedures and measures established by the company. In order to obtain ISMS certification, all 80 items, including management system establishment and operation (16 items) and protection measure requirements (64 items), must pass the conformity assessment.
Lemonbase places the highest priority on customer information protection, strictly complies with the domestic Information and Communications Network Act and Personal Information Protection Act, and systematically operates management procedures and policies. To this end, it establishes information protection policies and goals for ISMS operation, provides active support from management and establishes a dedicated information protection organization, conducts vulnerability diagnosis and risk assessments for information assets, applies technical, management, and physical protection measures, and conducts internal security audits and continuous monitoring.
Lemonbase previously obtained and maintained the ISO 27001・27701, an international standard for information security, in 2021, and has now obtained both domestic and international certifications by obtaining the ISMS certification, a domestic information security certification. HR tech companies such as performance management solutions handle sensitive personal information such as customer personnel information and performance evaluation records, and such information is at high risk of loss, so special care must be taken in information protection. Lemonbase plans to continuously strengthen its information protection management system based on the information protection technology and capabilities officially verified through this ISMS certification.
A Lemonbase official said, “We will continue to comply with relevant laws and operate a management system to ensure that customers can use our solutions with confidence without worrying about their personal information being infringed.”
- See more related articles
You must be logged in to post a comment.