Nearly half of all Korean companies do not allocate any budget for information security, even as cyber threats grow increasingly sophisticated. Only three in 10 firms that experienced security breaches actively responded by reporting incidents to relevant authorities.
The Ministry of Science and ICT (MSIT) and the Korea Information Security Industry Association released the results of the "2025 Information Security Survey" on Tuesday, examining public and corporate awareness of information security and the status of breach prevention and response in 2024. The survey covered 5,500 companies with 10 or more employees that operate networks, as well as 3,000 internet users aged 12 to 69.
The survey found that 52.6% of all companies maintain information security policies or regulation manuals. However, only 32.7% of firms conduct information security training.
Companies that allocate budgets for information security slightly exceeded half of the total, at 54.8%. The most common areas of spending were maintenance of security products and solutions (78.0%), installation or expansion of CCTV and video surveillance equipment at business facilities (57.4%), and purchase of security products and solutions (28.6%).
The full results of the survey are available on the websites of MSIT and the Korea Information Security Industry Association.
