Cloudflare obtains South Korea ISMS certification under ISMS-P
Original title: Localizing compliance at scale: achieving South Korea’s ISMS certification
Korean sign-ups require three separate consents, and social login is not offered in South Korea.
Cloudflare says it completed South Korea’s Information Security Management System certification under the ISMS-P framework after KISA-appointed auditors reviewed 80 controls over ten days. The certification covers security and privacy controls assessed against how personal data moves and against Korea’s Personal Information Protection Act. For users in South Korea, account creation uses four separately labeled consent items, three of them required, and social sign-up with Google, Apple, or GitHub is disabled so every account passes that form.
- Auditors appointed by KISA worked through 80 controls over ten days.
- Certification is valid for three years and requires an annual audit.
- Three required consents are hard gates; marketing sharing is optional.
- IP geolocation sets the default form, but the user’s selected country overrides it.
- ISMS is tied primarily to Article 47 of Korea’s network act.
- Vendors
- Cloudflare
- Countries
- South KoreaUnited States
From the original article
8 min read at blog.cloudflare.com
Cloudflare has achieved South Korea's ISMS certification following an audit across 80 controls. Learn how we localized user consent flows, adapted social sign-up paths at the edge, and validated our global security program.
By Kabin Calan · blog.cloudflare.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.