Security Policy ECOUNT acquired the International Security Certification ISO27001.
All servers are stored in Amazon Web Service (AWS), the world's leading cloud provider.

1. Internal and External Security Audits

• We conduct annual audits by external security specialists to review our internal security processes.
• System vulnerabilities are identified and addressed through penetration testing.
• Internally, a Chief Information Security Officer is appointed to establish and operate management plans.

2. Institutionalized Security Inspections and Training for Employees

• Daily and monthly security inspections are conducted to check for customer data storage on employee PCs, security seal status, and unauthorized program installations.
• All employees sign a security pledge before commencing work and complete annual information security training.
• Security levels are applied differently for each employee, and unauthorized access to information is strictly blocked.
• When employees are transferred, access rights to information are revoked as part of our personnel security management procedures.
• Antivirus programs on employee PCs are managed to prevent information leakage caused by malware.

3. Encryption of Customer Information

• Data entered by customers into ECOUNT is transmitted using encrypted communication.
• Critical personal information such as resident registration numbers, account numbers, and card numbers is encrypted using algorithms before being stored on the server.
• Encryption keys are stored separately in locations inaccessible from outside, preventing information leakage.

4. Systematic Management of Information Assets and Systems

• ECOUNT manages customers’ information assets by monitoring system operations in real time.
• Information assets are classified by importance, and security levels are applied accordingly for effective data management.
• We have systems in place to manage potential risks such as information breaches and service disruptions.
• When risks to information assets are identified through inspections, system improvements are made to enhance stability.

5. Information Access Control

• ECOUNT records all access to information for tracking and management purposes.
• Security professionals monitor for information breaches in real time and block abnormal access attempts.
• Access control systems and CCTV are installed in all offices and server rooms to prevent unauthorized entry.
• Security systems such as firewalls are used to minimize and manage the IPs that can access data.

6. Data Backup and System Upgrades

• Regular backups are performed to prevent the loss of valuable customer data due to accidents or errors.
• Data recovery plans are established and recovery drills are conducted to prepare for emergencies.
• Monthly system inspections are conducted, and security patches are applied when vulnerabilities are found.
• System changes such as program upgrades are carried out safely through thorough analysis by experts.

7. Establishment of Disaster Recovery Systems

• ECOUNT has established disaster recovery systems to ensure service continuity in the event of a disaster.
• Disaster recovery drills are conducted to verify the effectiveness of data recovery plans.