:::KrCERT/CC ENGLISH:::

Home > Privacy statment

General Provision
	The Internet Incident Response Support Center (hereinafter referred to as “the Center”) attaches great importance to your personal information as well as the agency’s information. In accordance with [Personal Information Protection Policy of Internet Incident Response Support Center], the center is safely managing all types of information you are providing.
	The center posts [Personal Information Protection Policy of Internet Incident Response Support Center] in the web site for you to refer to anytime you desire.

1. Purpose, method and range for information collection

The center is collecting a minimized level of information, which is aiming to cope with future incidents to be reported.

The center uses your information to meet the following purpose;

	Immediate contact to an administrator in charge of a relevant case
	Analysis on the system relating to the reported case
	Masking statistical or academic reports with a specific individual or organization not being identified.

The center receives incident reports in various ways such as home page, telephone, fax, Internet mail, and so on.

Incidents can be reported during 24 hours, 365 days.

In case of reporting incidents or consultation request, the received incident details include two types of information – the first category is about the incident reporter such as name of reporter, the organization he/she belongs to, telephone number and E-mail address. The second category include the incident itself - the victimized host IP address, host name, opWhen an incident report is received, the center explains responsibilities of relevant authorities including the Prosecutor’s office, Police Agency, National Intelligence Agency to the reporter and confirms that the reported case has been properly passed on to responsible.

Regarding incidents reported from oversea countries, the center contacts the relevant authority in the nation in two days after the case is reported and starts to investigate the incident.
erating system, how the incident is found and damages.

2. Agreement on information collection
	If you report an incident and apply for consultation through a web site of the Center, you are considered to have agreed to the collection of information required.
	Regarding incident reported or consultation request received through another route except homepage, the center briefly notifies [Personal Information Protection Policy of Internet Incident Response Support Center] to the reporter or requester. If they provide information afterwards, this is considered as an agreement on information collection.

3. Countermeasure to protect information The center is seeking for the following technological counter measures to ensure safety and prevent leakage, theft, loss, forgery or damage of information in handling your information.
	It blocks any access from external sources to protect against information leakage by hacking attempts and installs an invasion detecting system to monitor external threats to information.
	It regularly backs up all data to prevent damage of information, which might be caused by internal system errors.

4. Opening information to the public

The received information to the center is prohibited to be opened to the public or used for the purposes, which are not agreed by the incident reporter. Only if the incidents reported from oversea countries fall under the following categories, it can be informed to relevant organizations without agreement.

	In case relevant domestic organizations are governmental or public ones.
	In cases incidents involve human life, property and confidential information.
	In case damages caused to oversea or domestic organizations are substantial and aggressive investigation and tracking is required.
	In case damages incurred involve several organizations and willing support from relevant organizations is required.

5. Administrator in charge of information management

The center minimizes the number of administrator in charge of information management to prevent damage incurred by leakage or abuse of collected information and designates the administrator, who is responsible for actual management of information, as the chief of Internet Incident Response Support Center.