Back to Frameworks

South Korea ISMS-P

South Korea
v2023
5 domains
5 controls

ISMS-P (Information Security Management System - Personal information) is South Korea's integrated certification framework combining information security management (ISMS) and personal information protection (PIMS). Administered by KISA (Korea Internet & Security Agency), it is mandatory for telecommunications operators, ISPs, and large online service providers. Covers 80 control items across management system, protection measures, and personal information processing stages.

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (5)

Access Control

1 controls
Controls in the Access Control domain of South Korea ISMS-P1 controls
CodeTitle
KRISMSP-3Access Control, Cryptography, Logging

Certification

1 controls
Controls in the Certification domain of South Korea ISMS-P1 controls
CodeTitle
KRISMSP-5KISA + PIPC Cooperation, Certification, Recertification

ISMS

1 controls
Controls in the ISMS domain of South Korea ISMS-P1 controls
CodeTitle
KRISMSP-1Information Security Management System

Incident Response

1 controls
Controls in the Incident Response domain of South Korea ISMS-P1 controls
CodeTitle
KRISMSP-4Incident Response and Breach Notification

Privacy

1 controls
Controls in the Privacy domain of South Korea ISMS-P1 controls
CodeTitle
KRISMSP-2Privacy Management System and PIA

Maps to 1 other framework

5 total controls
ISO 27701:2019
2 source controls mapped|2 target controls covered
40%

Frequently Asked Questions

What is South Korea ISMS-P?

South Korea ISMS-P is a compliance framework from South Korea with 5 domains and 5 controls. ISMS-P (Information Security Management System - Personal information) is South Korea's integrated certification framework combining information security management (ISMS) and personal information protection (PIMS). Administered by KISA (Korea Internet & Security Agency), it is mandatory for telecommunications operators, ISPs, and large online service providers. Covers 80 control items across management system, protection measures, and personal information processing stages. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does South Korea ISMS-P have?

South Korea ISMS-P has 5 controls organised across 5 domains. The largest domains are Access Control (1 controls), Certification (1 controls), ISMS (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does South Korea ISMS-P map to?

South Korea ISMS-P maps to 1 other compliance frameworks. The top mapping partners are ISO 27701:2019 (40% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with South Korea ISMS-P compliance?

Start your South Korea ISMS-P compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about South Korea ISMS-P requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 5 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.

Get Started Free →

Free forever — no credit card required