[Alpha Biz=(Chicago) Reporter Paul Lee] Although several services suffered access failures due to the fire at the Kakao data center, some financial firms still have weak security, such as not providing alternative means of access or using general communication networks.

The Financial Supervisory Service said on the 18th that it held a meeting of all 269 financial companies carrying out electronic financial services and guided them to improve their identified problems.

The Financial Supervisory Service earlier inspected similar problems for all financial companies in the wake of a failure in access to Kakao Pay and Virtual Asset Exchange, which used KakaoTalk as the only login authentication method during the Kakao data center fire in October last year.

As a result of the inspection, some financial companies do not provide alternative means of access while relying on specific external companies, and use general communication networks without using high-security exclusive lines or VPN (virtual electronic lines) in connecting computer networks with external companies.

In response, the FSS called for the government to find out exactly what external systems are affecting the core tasks of financial companies, and for an external system identified as a single failure point to come up with a system that can respond quickly in the event of an emergency, such as providing alternative means through redundancy of service providers.

Also, in the case of external systems without alternative means, it was urged to come up with management measures, such as regularly conducting tests on emergency measures and quality levels of service providers and evaluating the results.

In addition, companies that provide services directly linked to electronic financial transactions, such as identity authentication, should have a security system (a dedicated line or a virtual dedicated line (VPN) with an equivalent level of security).

 

[ⓒ AlphaBIZ. 무단전재-재배포 금지]