(1) A person who has obtained the certification of an information security management system pursuant to Article 47 is entitled to receive a information security management grade from the Minister of Science and ICT in order to enhance the level of a corporate's management of its comprehensive information security and to secure users' reliability on information security services. <Amended on Mar. 23, 2013; Jul. 26, 2017>
(2) The Minister of Science and ICT may authorize the Korea Internet and Security Agency to perform the affairs of assigning ratings under paragraph (1). <Amended on Mar. 23, 2013; Jul. 26, 2017>
(3) A person who has obtained an information security management grade pursuant to paragraph (1) may indicate the obtained grade or advertise the details of such grade as prescribed by Presidential Decree.
(4) Where the Minister of Science and ICT finds any of the following cases, he or she may revoke the granted rating; provided, in the cases falling under subparagraph 1, the Minister of Science and ICT shall revoke the granted rating: <Amended on Mar. 23, 2013; Dec. 1, 2015; Jul. 26, 2017>
1. Where a person has obtained a information security management grade by fraud or other improper means;
2. Where a person falls short of the standards for assigning grades pursuant to paragraph (5).
(5) Standards for review in assigning ratings pursuant to paragraph (1); the methods and procedures for and fees of assigning ratings; the effective term of ratings; the methods and procedures for revocation of ratings pursuant to paragraph (4); and other necessary matters shall be prescribed by Presidential Decree.[This Article Added on Feb. 17, 2012]