How Much Do Major S. Korean Firms Invest in Cybersecurity?

Synopsis
Key Takeaways
- S. Korean companies average $2.1 million annually on cybersecurity.
- Samsung leads with significant investments.
- Many firms face serious cybersecurity vulnerabilities.
- Government mandates require disclosure of spending.
- Investment in cybersecurity is rising but needs effective implementation.
Seoul, May 26 (NationPress) The prominent companies of South Korea are allocating an average of 2.9 billion won (approximately $2.1 million) annually towards cybersecurity, as indicated by recent industry data released on Monday.
Based on findings from the Korea Internet & Security Agency (KISA) and additional sources, ten local corporations each invested over 100 billion won in information security in the last three years.
Samsung Electronics Co. led the expenditure, with a total investment of 712.6 billion won from 2021 to 2023, followed by the telecom giant KT Corp., which committed 327.4 billion won during the same timeframe, according to reports from Yonhap news agency.
SK Telecom Co., South Korea's largest mobile network operator that recently faced a significant data breach, ranked third with 251.5 billion won in investments.
Other notable companies within the top ten include Coupang Inc., SK hynix Inc., LG Uplus Corp., Samsung SDS Co., Woori Bank, Naver Corp., and LG Electronics Inc.
In 2022, the South Korean government mandated that firms managing network infrastructure or achieving annual sales exceeding 300 billion won publicly disclose their cybersecurity expenses.
A total of 746 companies reported their information security expenditures for 2023, contributing a combined 2.1 trillion won, an increase from 1.5 trillion won by 658 firms in 2021.
The average yearly spending per company rose by 24.5 percent, from 2.3 billion won in 2021 to 2.9 billion won in 2023.
However, experts caution that numerous South Korean companies remain significantly susceptible to cyberattacks due to comparatively inadequate security measures, as indicated by the report.
"In terms of investment, most companies in Korea possess far weaker security capabilities compared to SK Telecom, which was the latest target of a cyberattack," noted an industry insider.
"Many are more susceptible to sophisticated hacking methods, and some might have already been compromised without their knowledge. Companies must remain vigilant and undergo comprehensive security evaluations,” the insider further advised.