FSS to Inspect IT Risks at 491 Financial Institutions…Strict Action for Repeat Incidents – 아시아경제

FSS to Inspect IT Risks at 491 Financial Institutions…Strict Action for Repeat Incidents
Language
KR
CN
Economic Content Platform for Investors
Language
KR
CN
by Lee Eunjoo
Published 29 Jun.2026 15:00(KST)
The Financial Supervisory Service (FSS) will conduct inspections of IT internal controls and electronic financial incident response systems at 491 financial institutions, including banks, insurance companies, securities firms, and electronic financial service providers. In the second half of the year, the agency plans to focus on program change management, IT system performance management, and the operation of power facilities at data centers.
On June 29, the FSS announced that it had held a non-face-to-face “Financial IT Risk Response Meeting” for 491 financial institutions engaged in electronic financial work. This meeting was arranged to strengthen the incident response capabilities and IT resilience of financial institutions, in light of recent IT system failures and security incidents, as well as the expanding use of generative artificial intelligence (AI) and the increasing sophistication of cyberattacks.
The FSS shared the results of its on-site inspections and ongoing IT monitoring conducted during the first half of the year and provided guidance on key inspection areas for the second half. Participants agreed that financial institutions should assess their own capabilities to respond to electronic financial incidents and establish effective response systems to quickly restore operations in the event of an incident.
During the first half inspections, some financial institutions were found to have inadequate basic IT controls, such as program change management and performance management. The FSS instructed institutions to promptly apply security patches when vulnerabilities in operating systems and IT equipment are discovered, and to strengthen access control to prevent the misuse or abuse of critical IT data. The agency also stressed the need for real-time detection of attempts to compromise IT equipment and for regular checks to ensure the integrity and availability of backup and distributed data.
The FSS also emphasized that, when making program changes, institutions should analyze the potential impact in advance and conduct verifications in a dedicated test environment that simulates a variety of scenarios. The targets and criteria for security vulnerability analysis and assessment should be clearly defined, and any identified vulnerabilities should be addressed swiftly according to improvement plans.
To prevent fires at data centers, the FSS advised institutions to regularly inspect the management status of uninterruptible power supplies (UPS), emergency generators, and fire prevention equipment. It also recommended the immediate replacement of aged storage batteries that have exceeded their service life or present a high fire risk.

The FSS is also addressing threats posed by the unauthorized installation of ultra-small wireless spy chips on financial companies’ servers and IT equipment, which could be exploited for system intrusion or data theft. Financial institutions must check for the presence of wireless backdoors when introducing or bringing in IT equipment and regularly inspect for unauthorized wireless networks and abnormal signs.
In the second half of the year, the FSS will focus its inspections on the implementation status of basic IT controls, such as program change management and performance management. The agency will also review the operation of power facilities at data centers as part of its fire prevention efforts.
© The Asia Business Daily. All rights reserved. Unauthorized AI training and use prohibited.
Share
Kakao
Facebook
X
Copy link
Text Size
Normal
Medium
Large
Language
KR
CN
The Asia Business Daily makes no express or implied warranties regarding the accuracy, reliability, or fitness for a particular purpose of translated content.
Please note that some content may be inaccurate due to limitations of the translation solution.
Unauthorized reproduction, redistribution, or use for AI training is strictly prohibited.
Please email us at content@asiae.co.kr for feedback or corrections on our coverage.
Copyright © The Asia Business Daily (www.asiae.co.kr). All rights reserved.

source
This is a newsfeed from leading technology publications. No additional editorial review has been performed before posting.