LG Uplus publishes 2025 information security white paper, highlights AI-driven achievements

LG Uplus announced Thursday that it has published its "2025 Information Security White Paper," detailing the company's upgraded security framework and customer protection efforts tailored to the AI era.

The white paper comprehensively documents the company's key information security activities and achievements from last year. It covers a broad range of areas — from AI-powered security operations and personal data protection to security investment and governance — and includes a dedicated section on customer protection efforts such as spam and voice phishing prevention.

Among the headline achievements is the operation of an AI-based integrated security monitoring system. LG Uplus handled more than 200,000 security events through a Security Orchestration, Automation and Response (SOAR)-based integrated monitoring framework.

The mean time to resolve (MTTR) security events fell more than 90 percent compared with the previous year. The company has continuously strengthened its threat response capabilities through AI-based anomaly detection, cyber threat intelligence (CTI) and dark web monitoring.

Customer protection efforts were also stepped up. LG Uplus has guided customers toward everyday security practices through its "My Security Guard" service. The company also expanded its spam and voice phishing prevention activities using on-device AI technology "Anti-DeepVoice" and an AI-based spam-blocking solution called "ixi SpamFilter."

The company continued to upgrade its personal data protection framework as well. It strengthened the integrated management system of its Privacy Center, enabling customers to directly check the status of their personal data processing and exercise their rights. LG Uplus also extended personal data compliance checks to all company-wide services and reinforced data integrity verification and timely deletion procedures.

These efforts earned LG Uplus an A rating — the highest level — in an assessment of its personal data processing policies.

Security investment and talent acquisition continued to grow. LG Uplus's information security investment reached approximately 99.6 billion won ($66.7 million), up 17 percent from 2024 and 3.3 times higher than five years ago. The number of dedicated information security personnel also continued to rise, reaching 351 in 2025 — a 20 percent increase from the prior year.

The company also expanded its cyber attack surface management, broadening the scope of inspections to cover 150,000 targets and completing remediation of all identified vulnerabilities within 30 days.

The white paper also highlights efforts to strengthen information security governance. LG Uplus has operated a board-level reporting system for information security even before amendments to the Act on Promotion of Information and Communications Network Utilization and Information Protection took effect. Through an advisory committee composed of legal, academic and industry specialists, the company has continued to build expertise in addressing new AI-era security threats.

The white paper also documents a range of external cooperation achievements, including a partnership with the Korean National Police Agency on AI-based crime prevention and a joint program with Soongsil University to cultivate information security talent. LG Uplus is the only domestic telecommunications carrier participating in a pilot program — the Coordinated Vulnerability Disclosure and Vulnerability Disclosure Policy (CVD·VDP) initiative — led by the Ministry of Science and ICT and the Korea Internet & Security Agency. Through the program, the company has actively collaborated with white-hat hackers to identify vulnerabilities in live operating environments and contributed to spreading a culture of proactive vulnerability management.

"Information security is the most fundamental foundation for earning customer trust," said Hong Gwan-hee, LG Uplus's chief information security officer and chief privacy officer. "We will minimize security blind spots and create an environment where customers can use our services with confidence."