The process of obtaining the Information Security Risk Manager (ISRM) certification.

Get familiar with the latest Personal Information Protection Act of 2023 and prepare for ISMS-P and CPPG certifications and personal information protection practices.

Information security solutions—you may have heard of them, but do you know their exact roles and differences? A variety of information security solutions are used by businesses, including firewalls, IDS, IPS, WAF, DLP, and EDR! Understanding exactly what role each one performs, how it works, and in what situations it is used is an important first step toward developing your information security skills. A complete beginner’s guide to information security solutions (systems), designed for easy learning! Learn complex security technologies easily and systematically, starting from the basics.

-Learn about the information security continuous assessment items conducted annually for financial companies, and strengthen preparation and response capabilities as a financial security officer -Learn based on the highest-grade information security continuous assessment cases, and receive education on know-how to achieve and maintain the highest grade in information security continuous assessment

This is a lecture [Certification and Practice (Security · Network), Security] prepared for beginners.

This is a theoretical and practical training course designed for those aspiring to become ISMS-P auditors in 2026, preparing them for the auditor qualification exam. It is an expanded version that includes Financial ISMS-P in addition to the standard ISMS-P.

This course carefully selects the core systems that beginners must know in the vast field of information security. Instead of rigid theory, it's structured to help you intuitively understand system principles through clear analogies and practical examples. With this single course, you can grasp the big picture of information security systems as a whole and develop practical skills.

[An Introduction to Security Incident Response Through Scenarios of Web Server Hacking, Ransomware, and Account Takeovers] This course examines why various information security incidents—including web server hacking, ransomware, account takeovers, and internal intrusions—occur and how they spread, organized by incident type. By following each incident scenario, learners will understand the attack flow, analyze the key causes of the incident, and learn how to resolve the issue and prevent recurrence through security structures such as firewalls, DMZs, access control, privilege management, backups, and log monitoring. Rather than simply explaining basic security concepts, this scenario-based introductory information security course provides a comprehensive understanding of everything from analyzing the causes of security incidents to determining how to resolve them.

This course puts an end to operational vulnerabilities in Linux servers caused by incorrect permissions. Completely master file and directory permission control based on real-world practical standards.

You can understand the concept and technology of blockchain and conduct ISMS-P certification audits specialized for virtual asset exchanges.

As the adoption of generative AI accelerates, new security threats such as corporate confidential information leaks and prompt injections are surging. This course covers strategies for embedding security throughout the entire AI lifecycle, based on the National Intelligence Service (NIS) guidelines' 30 core security measures and 15 practical threat cases. It also addresses security issues in the latest AI trends, such as Agentic AI and Physical AI, and presents methods for establishing governance frameworks that can be immediately applied in practice.

Records remain, and responsibility grows! Everything about digital ethics that protects the workplace This course explores digital hate, digital sex crimes, and the risks of using AI that can actually occur in the workplace through case-based stories, clearly explaining what the problems are and how to prevent and respond to them. It firmly establishes the standards of digital ethics that today’s employees—who communicate digitally and use AI as part of their everyday work—urgently need, including how to work while respecting one another in digital spaces and how to use AI more safely and responsibly.

This course systematically teaches practical Docker skills (installation→operation→automation→security) and comprehensively covers the latest security threats and countermeasures in each section. It features a hands-on approach where you learn by following along with practical exercises. This curriculum is highly recommended for DevOps engineers, infrastructure engineers, and security practitioners who want to experience the latest container/cloud environments in real-world scenarios.

As AI systems become agentic and expand beyond text into image, audio, and multimodal capabilities, security threats are becoming significantly more complex. This lecture analyzes the latest security threats and attack techniques faced by AI Agents and Multimodal LLMs, as well as real-world cases, from an AI Red Teaming perspective.

Feeling overwhelmed by where to start with AI auditing? AI has moved beyond a mere technology trend and is rapidly expanding into corporate decision-making, workflow automation, customer service, recruitment, security, and risk management. However, compared to the speed of AI adoption, not many people systematically understand questions like: "Is the AI being properly controlled?", "Can we trust the AI's judgment?", or "What risks could arise from the data, models, and operational processes?" In particular, those working in IT auditing, security, internal control, and project management often face these concerns: - How does AI auditing differ from traditional IT auditing? - Is it enough to just look at the code for an AI model, or must we examine the data and training process as well? - How do AI governance, risk, bias, explainability, MLOps, and incident response connect to one another? - Where should I start to understand the concepts covered in AI auditing certification courses like AAIA from a practical perspective? This course was created specifically to resolve this sense of uncertainty. For about 20 years, I have gained experience in IT service planning, development, PM, collaboration platform operation, groupware construction, chatbot service planning, and security and audit-related tasks. I have firsthand experience in how systems are planned, developed, and operated in actual organizations, and how failures, changes, security, and user requirements are interconnected. Furthermore, I have synthesized the perspectives of IT auditing and AI auditing through CISA and AAIA study programs. In this course, rather than diving deep into complex AI technology through math or development, I focus on the core concepts that auditors and IT practitioners must understand. We will examine AI systems by breaking them down into the flow of data, models, operations, security, governance, risk, and audit procedures, and summarize what controls and checkpoints are required at each stage. Through this course, students will understand that AI auditing is not simply "evaluating AI," but rather the task of inspecting governance, risk, and control systems to ensure that AI is used safely and responsibly within an organization. This course is suitable for: - Those new to AI auditing. - Those in IT auditing or security who want to expand into the AI domain. - Those who want to organize AI governance and risk from a practical perspective. - Those who want to grasp the overall concepts before starting AI audit-related studies such as AAIA. Upon completing the course, you will be able to answer the following questions yourself: - What components make up an AI system? - What should an AI auditor check during the data, model, and operation stages? - Why are AI governance and Responsible AI important? - How are AI risk, bias, explainability, privacy, and security connected? - What perspectives and evidence should be included in an AI audit report? In the rapidly changing era of AI, the ability to manage and inspect technology to make it trustworthy is just as important as the ability to use it well. This course is an introductory program for those who want to understand the big picture of AI auditing step-by-step from the beginning. Let's build the first standard for looking at IT and AI from an auditing perspective together.