Bunjangmarket obtains ISO 27001 information security certification

Bunjangmarket said Wednesday it has obtained ISO/IEC 27001 certification, an international standard for information security management systems established by ISO and the International Electrotechnical Commission.

The ISO 27001 certification is granted after an assessment covering four areas — information security policy, access control, physical security and incident response — and 93 detailed control items. Bunjangmarket has maintained an Information Security Management System certification from the Ministry of Science and ICT for six consecutive years. With this latest certification, the company has now built a comprehensive information security management system. Since the company also operates Bunjang Global, it has had its security system and operational capabilities verified as meeting international standards.

To prevent security incidents, Bunjangmarket has implemented a "Zero-Paper" policy banning paper and writing instruments from consultation zones. It also enforces a weekly "clean desk" system to keep areas around PCs tidy, along with mandatory security stickers over phone cameras. The company also conducts its own internal inspections covering roughly 70 items each quarter.

"This certification is the result of our efforts to enhance member data protection and service reliability through an information security management system that meets international standards," said Park Byung-sung, chief technology officer and chief information security officer at Bunjangmarket. "We will continue thorough security management and proactive investment to build a resale environment where customers can trade with confidence."