한국어
2.9.6

Time Synchronization

Based on official sourcesISMSISMS-PCheckpoints 2Evidence 2Cases 2

Certification criterion

To ensure the accuracy of logs and access records and to enable reliable log analysis, the time of the relevant information systems must be synchronized to a standard time and managed periodically.

Key checkpoints

  1. Is the time of information systems synchronized to a standard time?
  2. Is it periodically checked whether time synchronization is being performed normally?

Detailed explanation

To ensure the accuracy of logs and access records and to enable reliable log analysis, the time of each information system must be synchronized to a standard time.

  • Synchronize time between systems using methods such as NTP (Network Time Protocol)
  • All information systems that require time accuracy must be synchronized without exception (access control systems, CCTV storage devices, etc.)

It must be periodically checked whether time synchronization is being performed normally.

  • Check items such as whether time synchronization errors have occurred, and whether time synchronization has been omitted due to OS reinstallation or configuration changes

Related laws

No individual legal provision directly corresponding to this item is specified.

Evidence (examples)

  • Time synchronization configuration
  • Evidence of time synchronization for major systems

Nonconformity examples

  • When the time of some important systems (security systems, CCTV, etc.) is not synchronized to the standard time, and periodic checks on whether such synchronization is in place are not being performed
  • When systems are configured to synchronize their time with an internal NTP server, but the time of some systems is not being synchronized, and no root-cause analysis or response is being carried out for this

Source

Source: The certification criterion is based on [Annex 7] of the Notice on Certification, etc. of Information Security and Personal Information Protection Management Systems (2023.10.5); the key checkpoints are based on the "ISMS-P Certification Criteria Detailed Inspection Items" (2023.10.31); the detailed explanation, related laws, evidence, and nonconformity examples are based on the original text of the "ISMS-P Certification Criteria Guide" (2023.11.23). This English text is an unofficial translation for reference; the Korean original prevails.
On this page
Item info
SetAnnex 7
Applies toISMS / ISMS-P
Key checkpoints2
Evidence2
Cases2
Related laws-