hr Platforms Bolster Security Amid Rising Data Leak Risks
heightened hacking techniques have prompted hr platform providers too enhance their security measures, but industry experts say clear standards and robust institutional support are still needed.
enhanced Security Measures
hr platforms are actively implementing stronger personal data protection through several key strategies:
- secondary certification: requiring additional verification steps to access sensitive data.
- file encryption: securing data by converting it into an unreadable format.
- partnerships with security firms: collaborating with external experts to bolster defenses.
companies are also deploying advanced security solutions, including firewalls, intrusion detection and prevention systems, and web request firewalls, to monitor and safeguard personal information flow.
company-Specific Initiatives
various hr platforms are taking specific actions to reinforce their security posture:
- job korea: mandates second-stage certification with a reduced certification period of three months.
- job planet: utilizes one-time passwords (otps) for corporate member logins and conducts cyber crisis response training for all employees to address internal hacking concerns like email phishing.
- wanted lab: has contracted with a government-designated security company to enhance its security infrastructure.
security Inspection Findings
in november of last year, a joint public-private security inspection by the personal information protection committee found that all six hr platforms assessed met 100% of the criteria.job korea and albamon were recognized for their autonomous personal information protection regulations.
however, shortly after, albamon experienced a data leak where more than 20,000 records were exposed within two minutes.
concerns over Inspection Effectiveness
the effectiveness of these security checks has been questioned, with critics noting that the checklists used were too broad and lacked specific standards for addressing refined attacks.
the kyobo committee’s review of 58 cases related to human resources,posting,recruitment,and employment system operations revealed only a level of minimum security.
there is a growing consensus that hr platforms, which handle sensitive data like resumes and self-reports, need to move beyond superficial measures and implement robust, enforceable defense systems.
industry Perspective
it is necessary to come out with the government and institutions when the hr platform deals with personal information or leakage when leaked,
said an industry official, emphasizing the need for government and institutional support in managing personal information and data breaches.
faq: hr Platform Security
- what are the main security threats to hr platforms?
- advanced hacking techniques, phishing attacks, and internal vulnerabilities.
- what security measures are hr platforms implementing?
- secondary certification, file encryption, and partnerships with security companies.
- what role does the government play in hr platform security?
- providing standards, conducting inspections, and offering support in data breach situations.
expert Insights
the shrm reported in 2019 that cybersecurity should be a top concern for hr leaders,emphasizing the need to minimize risks [[2]]. remote work also poses a significant threat, making it difficult to secure employee records [[1]].
in one instance, an hr platform data leak exposed 435,000 payslips, 300 tax filings, 3,800 insurance payment documents, and 21,000 salary sheets, highlighting the severity of potential breaches [[3]].
the kyobo committee’s review of 58 cases related to human resources, posting, recruitment, and employment system operations revealed only a
level of minimum security.
kyobo committee
President Yoon Seok-yeol is speaking at the third session ‘Sustainable Development and Energy Transition’ of the 19th G20 Summit held at the Museum of Modern Art in Rio de Janeiro, Brazil on the 19th (local time). Yonhap News
