Security Policy ECOUNT acquired the International Security Certification ISO27001.
All servers are stored in Amazon Web Service (AWS), the world's leading cloud provider.

ECOUNT is obtaining and renewing the security certification through the following security system.

1. Internal and external security audit

• We examine the internal security work process through external security-specialized auditors every year.
• Diagnose system's vulnerabilities by simulating hacking and improve the system.
• Appoint an information protection manager internally to establish and operate the management plan.

2. Institutionalize security inspections and security training for employees

• Security checkups are enforced in a daily, monthly basis to inspect employees' PC for saved customer's information, security seal, unauthorized programs installed, etc.
• All employees sign a security pledge before being put in to work and complete information protection training every year.
• Each employees are applied with different security levels and unauthorized personnel's access to information is blocked.
• Human security management is implemented by retrieving the information access of an employee who is transferring to other departments.
• Prevent data leakage caused by malicious code by monitoring the anti-virus program on employees' PC.

3. Encrypt customer information

• Use encrypted communication when sending the data, that the customer entered in ECOUNT, to the system.
• Important personal information like personal identification number, bank account number, credit card number, etc. are encrypted using algorithms before saving in the server.
• The key used to encrypt is stored separately in an unreachable place to block information leak.

4. Systematic management of information assets and system

• ECOUNT manages customers' information assets by monitoring the system operation status real-time.
• We manage the company's information assets effectively by classifying according to the importance and applying different levels.
• We have a system to manage potential risks such as information infringement, service failure, etc.
• When risk is found on the information asset during inspection, we strengthen the stability by improving the system.

5. Control access to information

• ECOUNT records and manages all access to information.
• Abnormal accesses are blocked by security experts who monitor information breaches real-time.
• Access control system and CCTV is installed in the offices and server room to prevent illegal intrusion by outsiders.
• We minimize and manage the IP that can access data with security systems like the firewall.

6. Data backup and system upgrade

• We regularly back up customers' data to prevent it from being lost on accidents or mistakes.
• Data recovery plan is established and recovery simulation training is held to prepare for any emergency situations.
• Monthly system inspection is performed and security patches are applied when vulnerability is found.
• System modification like program upgrade is carried out safely by going through thorough analysis by experts.

7. Establishment of recovery system from calamities

• ECOUNT is building a recovery system from calamities to ensure service continuity in the event of disaster.
• Recovery from calamity training is conducted to validate the data recovery plans.