Dong A Socio : Annual Status Report of Information Protection(Voluntray Disclosure)

Annual Status Report of Information Protection(Voluntary Disclosure)

1. Investment Amount for Information Protection	Amount Invested for Information Technology(A) (KRW)	3,204,482,387
Amount Invested for Information Protection(B) (KRW)	286,186,232
B/A (%)	8.9
2. Human Resources Status for Information Protection	Total Number of Employees	102.9
Number of Employees Works for Information Technology Division(C)	7.3
Number of Employees Works for Information Protection Division(D)	Regular Employees	2.4
Temporary Employees	0
Outsourced Employees	0.2
Total	2.6
D/C (%)	35.4
3. Certification, Estimation, Inspection Matters related to Information Protection	ISO/IEC 27001
4. Activities of Information Protection for Information and Communication Services Users	- Held the Information Protection Committee twice and the Group Companies Information Protection Committee once - Measured the information security effectiveness and conducted management review once - Established an internal security audit process and conducted the security audit for the major departments - Conducted the risk assessment for all departments and identified risks - Performed the vulnerability diagnosis for each important system - Conducted the personal information protection education for all executives and employees 7 times a year - Held the day of company-wide information protection twice - Conducted the company-wide intrusion incident response training (malicious email mock training) - Revised the information protection policy and guidelines - Completed qualification training for the information security officer's ISO27001 senior auditor - Paid information keeper activity points for each team - Newly established the department exclusive for the information protection (December 2020)
5. Date of Decision to Disclose	2022-06-17
6. Other references useful for making investment decisions
-
※ Title and date of other disclosure related to this one	-