Korea Financial Security Institute distributes company-wide training guidelines to financial institutions in preparation for AI hacking

It has been confirmed that the Korea Financial Security Institute distributed simulation exercise guidelines in July to prepare the entire financial sector for hacking attacks based on stateoftheart artificial intelligence (AI). The guidelines are intended to ensure that financial companies regularly respond to AI security threats, with organizationwide management centered on the board of directors and the chief executive officer (CEO) being key. The guidelines recommended conducting periodic drills assuming multiple security incidents and continuing training on a weekly or monthly basis until vulnerability response is stabilized. They also suggested promptly managing identified vulnerabilities and reflecting the results of the simulation exercises in vulnerability management. Citing cases from major countries such as the United States and the United Kingdom, the Korea Financial Security Institute emphasized that vulnerability management should be viewed not as a simple IT task but as an operational risk. Financial authorities are expected to examine whether financial companies properly complied with the Electronic Financial Supervision Regulations and whether they fulfilled their obligations to prevent hacking in connection with this hacking incident.