With the enforcement of the amended Regulation on Supervision of Electronic Financial Transactions, what should financial companies and electronic financial business operators check first and foremost?

Following the enforcement of the amended Regulation on Supervision of Electronic Financial Transactions, financial companies and electronic financial business operators should first check their internal security management systems in response to the change in the security regulatory framework, the obligation to establish a disaster recovery center, and whether the compensation limit for electronic financial incidents has been raised.

Checking the internal management system in response to the change in the security regulatory framework

The core of this amendment is the shift from the previous regulation centered on detailed conduct rules to a principle-based regulation.

Therefore, beyond merely meeting the level of the regulation's provisions, it is necessary to comprehensively confirm whether internal security policies, computer room management, and internal control procedures are operated in accordance with the principle-based regulation.

Confirming whether the obligation to establish a disaster recovery center applies

To strengthen the resilience of financial computing, the obligation to establish a disaster recovery center has been extended to electronic financial business operators and specialized credit finance companies above a certain size.

However, because some provisions, such as the obligation to install a disaster recovery center, apply from 2026, you should review in advance whether you fall within the scope of the obligation based on the size of the company and the volume of electronic financial transactions.

Reviewing the limit of liability fulfillment insurance in preparation for electronic financial incidents

The minimum compensation limit for liability fulfillment insurance, mutual aid, or reserves for compensating consumer harm when an electronic financial incident occurs has been raised.

Even if you have already subscribed to insurance, you should confirm whether it meets the amended standards and, if necessary, adjust the compensation limit.