한국어

ISMS-P Certification Criteria

ISMS-P Certification Criteria Reference

ISMS-P certification criteria. Based on official source documents.

Searches the full set of criteria in the current language.

How to use

Step 1

Find by keyword

Type an item name or keyword in the search box. It searches the criteria in the current language.

Step 2

Browse by group

Pick a group from the header or the list below to scan the items it contains.

Step 3

Read with sources

Check each item's checkpoints, detail, evidence, and cases with their source.

The applicable set depends on the type of organization

Annex 7 is the full (general) set of criteria, while Annexes 7-2 and 7-3 are relaxed sets that ease the certification burden for small and medium enterprises (Network Act Article 47-7(1), Enforcement Decree Article 55-7(1), numbered 49-2 until 2026.9.30). One of the three applies depending on the applicant's size and type; they are not different certifications but the same certification with a different applicable set. ISMS certification leaves out the 3.x items, and in Annex 7-2 also item 1.1.2 (Notice Article 23).

Annex 7Full set101 itemsISMS / ISMS-P criteriaApplies to General ISMS/ISMS-P applicants (full set applies)Annex 7-2Simplified62 itemsSimplified (relaxed set)Applies to Small enterprises, and medium enterprises with previous-year ICT-service revenue under KRW 30 billionAnnex 7-3Simplified65 itemsSimplified (relaxed set)Applies to Medium enterprises with ICT-service revenue of KRW 30 billion or more that run no major ICT facilities of their own and use hosting or cloud services certified under ISMS, ISMS-P or CSAP

Sources

Criteria / checkpoints
ISMS-P Certification Criteria Detailed Inspection Items: Annex 7 (2023.10.31), Annex 7-2/7-3 (2024.7.24)
Detailed explanation
ISMS-P Certification Criteria Guide (2023.11.23)

The item documents are for reference; verify final decisions against the source and the certification body's guidance.

The Korean documents are authoritative and based on the official source material. The English documents are an unofficial translation; where they diverge, the Korean original prevails.