인프런 - 라이프타임 커리어 플랫폼

This is the fourth series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T3. Certification criteria 3". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

This is the first series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T1. Certification system, certification standard 1". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

With hacking incidents occurring continuously from 2025 to the present, the addition of penetration testing to ISMS-P certification has been finalized. As the work-life balance and importance of penetration testers rise, there is a need for an environment where they can grow. Unlike other fields of information security, penetration testers can only practice and build portfolios when a proper environment is provided. Unlike the first penetration testing environment which simply provided a practice lab, this second environment allows you to build the website yourself, complete with more diverse admin functions and even actual payment features! Penetration testing scenarios for achieving practical goals have been fully implemented! ~Hone your skills according to the 2026 Major Information and Communication Infrastructure penetration testing items and evolve into one of the top penetration testers in the country!~

The recent Coupang personal information leak has been recorded as the largest data breach in South Korea's history, marking an instance where the personal information of virtually every South Korean citizen was compromised. However, the debate regarding the effectiveness of ISMS-P concluded with meaningless improvement measures such as mock hacking and certification revocation. As of December 11, 2025, companies like Coupang—which were subjects of the Personal Information Processing Policy Evaluation System conducted by the Personal Information Protection Commission in 2024—continue to operate in violation of more than 10 criteria of that evaluation system. The reason for this lies in human error involving Coupang's personal information team (comprised of top domestic and international experts) and ISMS-P auditors (who hold the highest domestic and international qualifications). With basic common knowledge of the Personal Information Protection Act, this recent leak, as well as breaches at Gmarket, Netmarble, SKT, KT, and LG U+, could have all been prevented. In reality, accidents continue to occur because customers' personal information is not protected—or appropriate protective measures are not established and operated—due to human issues such as inadequate preliminary inspections and differences in legal interpretation. Through this lecture, you can acquire the skills to evaluate personal information transparently and objectively, with the hope that personal information protection for customers will be achieved through professional training aimed at proper inspection methods and eliminating blind spots.

Since most large corporations and financial institutions are conducting penetration testing in addition to standard mock hacking, there is a recent need to establish new roles and secure capabilities to perform intrusions as a "RED TEAM" in the literal sense. Therefore, beyond simple WEB and APP mock hacking, we have opened a training course where participants can discover scenarios for infiltrating servers and practice executing large-scale personal information leaks. + Provision of server and website environments for penetration testing + Sharing of hacking tools and methodologies

Training for establishing risk assessment methods for network equipment, security devices, and control systems based on the revised Critical Information and Communication Infrastructure standards for the second half of 2025, and eliminating vulnerabilities through the integration of years of know-how and fast, accurate inspections and remedial actions. In particular, we expect efforts to secure inspection speed and improvement plans in accordance with the designation of ISMS-P and ISO27001 certification scopes. Gain experience with network equipment, security devices, and control systems—which are relatively less accessible and more difficult to set up environments for compared to Servers, DBs, WEB, WAS, PCs, and Cloud (Public, Private).

Vulnerability analysis and evaluation for electronic financial infrastructure as of 2025, covering DBMS, WAS (PaaS), and PC based on the revised standards for critical information and communications infrastructure in the second half of 2025. Additionally, penetration testing explained according to the standards revised in the second half of 2025, including mobile penetration testing. Expect skill improvement through the transfer of know-how, along with fast and accurate inspection methods and remediation plans.

Training for obtaining ISMS-P certification and ISO27001/ISO27701 certification

This is the fifth series of integrated courses that cover everything from the introduction to practical application of the ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course - Personal information protection laws (2022 version)". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

For those preparing for the ISMS-P certification auditor qualification, we have prepared a non-public explanation course for a mock exam. If you are studying for the ISMS-P certification, we hope you will organize and pass through the mock exam course.

This is the sixth series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T4. Personal information protection law revision (2/2)". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

This is the fifth series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T3. Personal information protection laws (1/2)". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

This is the second series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T2. Certification criteria 2 (1/2)". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

This is an online course where you can learn essential content for certification, from basic concepts of information security to the latest security issues. With theory reflecting the latest exam trends and practical mock tests, you can efficiently prepare for the exam, and it's structured so that even those new to information security can easily follow along.

- This project involves installing actual apps on mobile phones and practicing simulated hacking using hacking tools, in accordance with the inspection standards for electronic financial infrastructure and public services. - This course allows you to gain an understanding of mobile app penetration testing, overcome any hesitations, and learn everything from inspection know-how to report writing and communication methods.

- Provision of penetration testing environments and inspection tools - Web penetration testing practice based on the 2026 revised edition for Critical Information and Communication Infrastructure - Web penetration testing practice based on the 2026 revised edition for Electronic Financial Infrastructure - Review and sharing of vulnerabilities existing on websites - Training on penetration testing reporting methods and improvement strategies

- Understanding the establishment and inspection of personal information management systems in accordance with the Personal Information Protection Act - Inspection and status assessment of personal information processing systems - Creation of personal information flow charts and flow diagrams - Identification of personal information breach factors - Publication of personal information impact assessment summaries

- Specialized training in preparation for Financial Security Institute ISMS-P certification audits - Identifying information security workflows and establishing improvement plans for fintech and electronic financial companies - ISMS-P certification application process following vulnerability analysis and evaluation of electronic financial infrastructure in accordance with the Electronic Financial Supervisory Regulations - Improving incident response and data breach response manuals for financial institutions - Know-how on creating personal information flowcharts and establishing personal credit information management systems, as well as submitting operational performance reports in accordance with the Credit Information Act

- Policy revision for establishing cloud management systems (CSP/MSP contracts and SaaS contracts) - Vulnerability assessment for ISMS-P/ISO27001 certification or major information communication/electronic financial infrastructure response in cloud environments (public/private asset identification and vulnerability remediation) - Security operations and incident response in cloud environments - ISO27017&ISO27018 certification response

Transfer of inspection know-how for 2025 Electronic Financial Infrastructure (OS Virtualization, Container Virtualization) and transfer of inspection know-how for Critical Information and Communication Infrastructure (CA, HV) revised in the second half of 2025. In particular, risk assessments will be provided for the latest versions of core hypervisors (ESXi, Xenserver). Additionally, risk assessments for K8S (Kubernetes_master), Docker, etc., will be provided. Finally, vulnerability analysis and evaluation results that meet CSAP (Cloud Security Assurance Program) standards will be provided. **Installation methods for ESXi, Kubernetes master, Docker, and Xencenter provided.