South Korea launches Financial Security Institute as finance sector cyber body

On 1 April 2015, the Financial Security Institute (금융보안원) began operating in South Korea as the financial sector's dedicated security agency. It works under the supervision of the Financial Services Commission, the country's main financial regulator.

The institute was set up to bring together work that had previously been spread across several organisations, including monitoring and responding to cyber threats against banks, insurers, card companies and securities firms. It was also tasked with supporting security policy, running security assessments and promoting security standards across the industry.

The launch followed a series of serious data leaks at financial companies in the preceding years, which raised public concern about how well customers' personal and financial information was protected. Regulators concluded that the sector needed a specialised body with technical expertise, rather than relying only on general-purpose cyber agencies.

Since then, the institute has served as a central point for sharing threat information among financial firms and as a technical adviser to regulators. That role is why a later breach at the institute itself drew particular attention: the body meant to defend the sector's security became a target.