For each regulation, what Genox can take on
and what stays with your team
We picked the five Korean regulations security teams ask us about most. If you run systems or handle personal data in Korea, including as a foreign company with a Korean entity or Korean customers, some of these will apply to you. Each page covers what the regulation actually requires, which Genox features and services relate to it, and a table of what you still have to do yourself when you use Genox.
Guides by regulation
We rechecked the statutes and the regulators' own materials in November 2026 when writing these.
Notices and guidelines change often, so open the original texts listed under references at the bottom of each page before you act on anything.
Preparing for ISMS-P certification
Of the 101 certification criteria, we cover the evidence you can use for log management, vulnerability assessment, anomaly monitoring and incident response.
Information security and personal information management systemRead moreNetwork separation and AI in finance
The exceptions to the network separation clause in the Electronic Financial Supervisory Regulation, the 2024 network separation improvement roadmap, and the AI guidelines for the financial sector that took effect in June 2026.
Financial companies · electronic financial business operatorsRead moreNational Network Security Framework (N2SF)
N2SF sorts work information into Classified (C), Sensitive (S) and Open (O). We look at which domain a security monitoring AI should sit in.
Government and public institutionsRead moreAI Basic Act
In force since January 22, 2026. How to check whether an AI used for security counts as high-impact AI, plus the transparency and explanation duties.
AI developers and AI usersRead moreStandards for securing personal information
Where monitoring and log analysis actually help with the clauses on access control, keeping and reviewing access logs, and encryption.
Personal information controllersRead moreA few things to know first
- Genox is not a certification body or an auditor. Using Genox products or services does not get you certified or count as meeting a regulation.
- Genox itself does not yet hold certifications such as ISMS-P or ISO/IEC 27001. Our preparation schedule is public in the Trust Center.
- These pages are not legal advice. Where interpretations differ, we say so. Whether a rule applies to you is a question for your legal team or the regulator in charge.
- We only cite article numbers we checked against the original text in the Korean National Law Information Center (국가법령정보센터).
Let's start with which regulations apply to you
Tell us your industry, the kinds of information you handle, and the security tools you run today.
We'll tell you which items to work on first.