[Letters] Concerns for information security in Korea

While businesses may be complacent about the information security risks, it is clear that they need chief information security officers who can give training and awareness about security vulnerabilities to their employees, monitor security controls, remedy weaknesses and resolve all incidents in a timely manner.

A chief information security officer has to give assurance that controls are in place and operating as intended to protect information resources, otherwise companies would be leaving themselves vulnerable to attack or compromise. Without such initiatives by businesses as well as the government, we believe the state of cyber security defense in Korea will continue to be disjointed, ineffective and uncoordinated.

David Kim and others at Sogang University, Seoul, Korea