Mr. Latte

KISA ISMS Certification Project

https://isms.kisa.or.kr

A development process improvement and security enhancement project for KISA (Korea Internet & Security Agency) Information Security Management System certification.

Key Development

• Established and deployed information security policies company-wide
• Reorganized and standardized development processes
• Built configuration management system
• Established development history management system
• Performed security vulnerability assessment and remediation
• Established and applied access control policies
• Documented standard processes for the development division

Tech Stack

• Methodology: ISMS (Information Security Management System)
• Standards: KISA Certification Criteria
• Documentation: Policy documents, Process guides
• Tools: Configuration management tools, Security assessment tools

Performed policy establishment and deployment for certification, development process reorganization including configuration management and development history, and security enhancement work to establish standard processes within the development division.