Search within page
0/0
Information-Security Framework
HanmiGlobal strictly complies with all relevant domestic and international laws and regulations. The company continuously updates its internal rules and policies to reflect changing external conditions, thereby managing its information-security systems and processes in a stable and reliable manner. This approach allows HanmiGlobal to demonstrate a superior security posture to customers and all other stakeholders.
Information-Security Management Policy and Goals
By fostering a voluntary culture of compliance and responding proactively to potential incidents, HanmiGlobal strengthens the foundation for sustainable growth. Regular training for employees who handle personal data, inspections of unique-identifier management practices, and audits of internal privacy-management plans have enabled us to record zero personal-information breaches.
Information-Security Policy
HanmiGlobal’s information-security policy aims to secure and safeguard personal data in every form. It prevents the loss, theft, leakage, alteration, or destruction of personal information and protects data-subject rights through a combination of technical and administrative measures. Under the direction of the Chief Privacy Officer, the policy covers the creation and execution of internal management plans, implementation of protective measures, periodic self-audits, and ongoing privacy training. The Chief Privacy Officer and all data handlers oversee related tasks, while every employee receives regular instruction to understand and practice the importance of data protection. Through these measures, the company is committed to systematic management and protection of personal information.
Composition and Roles of the Information-Security Committee
HanmiGlobal’s Information-Security Committee reports directly to the Head of Corporate Support and is chaired by the Chief Technology Officer, with the Heads of HR, the AX Office, Business Support Office, and Engineering Office serving as members. Twice a year, the committee conducts special company-wide security inspections to monitor and strengthen overall protection levels. The chair oversees day-to-day committee operations and establishes security-management regulations, while functional security coordinators carry out routine and ad-hoc inspections in line with the Security Management Matrix. Department- and site-level security managers safeguard IT assets and human resources at their respective locations. This systematic approach enables the company to maintain and continually improve a robust information-security posture.
Strengthening Security Inspections
Information-Security Audits and Diagnostics
HanmiGlobal conducts a full range of security-inspection activities to eliminate internal and external risks and vulnerabilities. Twice a year, every employee undergoes a security check. At the same time, the company simultaneously develops and maintains its security systems, standardizes incident-response procedures, consistently revises information-protection policies, and inspects the infrastructure of every new or existing system. In 2023, for example, we completed an S1 web-application vulnerability assessment and a Microsoft security-hardening review. These measures safeguard the confidentiality, integrity, and availability of critical assets and continuously raise our overall security posture.
Anti-Malware E-Mail Protection and System Hardening
To block malicious code, HanmiGlobal uses Microsoft Defender for Office 365, which filters spam and harmful links before they reach users' inboxes. Endpoint security is further reinforced through URL and spam filtering, network access control, document-security management, and removable-media controls, creating multiple layers that safeguard the confidentiality, integrity, and availability of corporate data while keeping day-to-day operations stable.
Multi-Factor Authentication (MFA)
Rising global incidents of hacking and data leakage demand stronger account protection. HanmiGlobal has therefore implemented multi-factor authentication, replacing single-factor login with a more secure, step-by-step verification process that better shields our mission-critical resources.
Enhancing Security Awareness
Information-Protection Pledge and Periodic Security Checks
At the start of every year, HanmiGlobal requires all employees, as well as on-site contractors and partner staff assigned to our projects, to sign an information-protection pledge, reinforcing that every individual is personally responsible for safeguarding company data. The pledge underlines our commitment to preventing leaks and other security incidents. In addition, a company-wide security inspection is carried out twice a year to verify compliance and close any gaps that emerge.
Security Training and Guidelines
Security awareness programs are provided for new hires, promoted staff, and designated security officers, supplemented by detailed guidance documents. External partners working on HanmiGlobal sites also receive training on security and personal-data handling. Through the corporate groupware system, the company continuously shares the latest threat information and runs interactive security campaigns, all of which help keep employees alert and informed about their protective responsibilities.