한국어 
日本語 
English 
Security Criteria to
Verify Before Choosing an LMS
Verify these 8 points before entrusting personal data to an education platform.
Korea's highest-level integrated security certification
Global security management framework
Major insurers, banks, and financial clients
Security Checklist
-
Does the vendor hold ISMS-P or equivalent security certification? ISMS-P is Korea's highest-level integrated certification operated by KISA, requiring 102 criteria across 3 domains with annual surveillance audits. Required by financial and public institutions for vendor selection.
TouchClass holds both ISMS-P & ISO 27001 -
Is encrypted storage and transmission of personal data guaranteed? Is RBAC in place? AES-256 for data at rest and TLS 1.2+ for data in transit must be applied. Without role separation for admins, operators, and learners, enterprise data may be indiscriminately exposed.
-
What is the operational reliability level? Is there a CERT incident response system? Is a DR system in place? If the platform goes down during mandatory training deadlines, legal liability issues arise. Verify operational reliability and incident response provisions in the contract beforehand.
-
Has the vendor passed vendor security audits? Does it hold CSP (Cloud Service Provider) security certifications like AWS? Financial and enterprise clients often have stricter internal standards, and passing their audits serves as external validation of security capabilities.
Major insurer & bank vendor audit: 99.1 points
Annual surveillance audit passed
Information Security Management
No security certification found
No security certification found
For financial and public sector vendor selection,
verify ISMS-P certification status first.
Multi-AZ redundancy · 24/7 monitoring
Domestic LMS Security Comparison
Based on official websites and KISA certification registry. Unverified items indicate no publicly available information.
| Solution | ISMS-P | ISO 27001 | Cloud | Financial References |
|---|---|---|---|---|
| TouchClass | Certified | Certified | AWS (Seoul Region) | Major insurance group, major bank, commercial bank |
| Competitor A | Not Certified | Unverified | — | — |
| Competitor B | Not Certified | Unverified | — | — |
| Competitor C | Unverified | Unverified | AWS | — |
| Competitor D | Unverified | Unverified | — | — |
| Competitor E | Unverified | Unverified | — | — |
* As of April 2026, based on each solution's official website and KISA certification registry. 'Unverified' means not found in public information and is distinct from 'Not Certified'.
