Information Security

KAI has appointed an in-house Chief Information Security Officer
(CISO) and executes systematic information security tasks under
the constant management and supervision of the Information
Security Committee.

Information Security Management and
Operating System

Operation of a Dedicated
Information Security Organization

KAI has appointed an in-house Chief Information Security Officer (CISO) to oversee defense technology improvement activities and the operation of the information security management system. It has formed a dedicated organization to strengthen technical, physical, and personnel security and to protect personal information under the constant management and supervision of the Information Security Committee. KAI has internalized its ability to respond to cybersecurity incidents and internal information leakage incidents by organizing a 24/7, 365-day security monitoring organization with its own manpower. It has also strengthened its ability to respond to security incidents through parallel control with a remote security monitoring company.

International Standard
Information Protection Certification

In order to activate the development of the next-generation KF-21 fighter aircraft and the overseas export of the FA-50 supersonic fighter aircraft and to improve the stability and continuity of information security operations, KAI obtained ISO 27001 Version 2022 International Standard Certification in 2023. Thus, KAI has been recognized for its international security level in the field of information protection, and it will maintain information protection activities through continuous improvement in accordance with the life cycle (PDCA cycle) required by information protection.

Information Protection Disclosure

KAI conducts information protection disclosure through the electronic disclosure system of the Ministry of Science and ICT to strengthen the responsibility and reliability of information protection by voluntarily disclosing information related to information protection to the market and indirectly providing various levels of information to users.

s