(1) The Government shall establish the Korea Internet and Security Agency (hereinafter referred to as the "Internet and Security Agency") to upgrade information and communications networks (excluding matters regarding establishment, improvement, and management of information and telecommunications networks), encourage the safe use thereof, and promote the international cooperation and advancement into the overseas market in relation to broadcasting and communications. <Amended on Apr. 22, 2009; Jun. 9, 2020>
(2) The Internet and Security Agency shall be a corporation. <Amended on Apr. 22, 2009>
(3) The Internet and Security Agency shall perform the following business affairs: <Amended on Apr. 22, 2009; Feb. 17, 2012; Mar. 23, 2013; Nov. 19, 2014; Jun. 22, 2015; Jul. 26, 2017; Feb. 4, 2020; Jun. 9, 2020; Jun. 8, 2021; Jun. 10, 2022; Jan. 23, 2024; Oct. 1, 2025>
1. Survey and research of laws, policies, and systems for the use and protection of information and telecommunications networks, promotion of the international cooperation and advancement into the overseas market in relation to broadcasting and communications, etc.;
2. Survey and analysis of statistics regarding the use and protection of information and telecommunications networks;
3. Analysis of negative effects arising from the use of information and telecommunications networks and research on countermeasures;
4. Public relations activities, education, and training for using and protecting information and telecommunications networks;
5. Information protection for information and telecommunications networks, development of technologies regarding the Internet address resources and standardization thereof;
6. Support for policies for the information security industry, development of relevant technology, and fostering of human resources;
7. Implementation of certification and evaluation of information security, such as certification of information security management systems, certification and evaluation of information security systems, certification of information security of devices and the like connected to information and communications networks, and software development security assessment; and the provision of support therefor;
8. Research of countermeasures for protecting personal information, and support for development and dissemination of protective technologies under the Personal Information Protection Act;
9. Operation of a personal information infringement call center under the Personal Information Protection Act;
10. Consultation on and processing of complaints related to transmission of advertising information and online advertisements;
11. Management of cyber security incidents in information and communications networks, analysis of causes thereof, operation of systems for responding thereto; and promotion of chief information security officers' activities to prevent and respond to such incidents and to cooperate each other;
12. Support for policies on electronic signature certification under Article 21 of the Electronic Signature Act;
13. Support for an efficient operation of the Internet and encouragement of wider use thereof;
14. Support for the protection of stored information of the Internet users;
15. Support for service policies pertaining to the Internet;
16. Protection of users and support for the dissemination of sound information on the Internet;
17. Affairs related to the management of Internet address resources under the Internet Address Resources Act;
18. Support for the operation of the Internet Address Dispute Resolution Committee under Article 16 of the Internet Address Resources Act;
19. Support for operation of the conciliation committee under Article 25 (7) of the Act on the Promotion of Information Security Industry;
20. Support for such international cooperation, overseas expansion, and overseas publicity activities as are regarding broadcasting and communications;
21. Support for policies related to identity verification services and to the creation and processing of connecting information;
22. Any other business incidental to the business referred to in subparagraphs 1 through 21;
23. Other business determined to fall under the affairs of, or entrusted to, the Internet and Security Agency in accordance with this Act, or any other statute or regulation, or other business entrusted by the Minister of Science and ICT, the Minister of the Interior and Safety, the Korea Media and Communications Commission, or the head of any other administrative agency.
(4) Expenses necessary for the business affairs of the Internet and Security Agency shall be funded by the following financial resources: <Amended on Mar. 22, 2016>
1. Government’s contributions;
2. Revenues accrued from the business referred to in each subparagraph of paragraph (3);
3. Other revenues accrued from operating the Internet and Security Agency.
(5) Except as provided in this Act, the provisions governing incorporated foundations under the Civil Act shall apply mutatis mutandis to matters regarding the Internet and Security Agency. <Amended on Apr. 22, 2009>
(6) No person, other than the Internet and Security Agency, shall use the name "Korea Internet and Security Agency". <Amended on Apr. 22, 2009>
(7) Matters necessary for the operation of the Internet and Security Agency and performance of its business affairs shall be prescribed by Presidential Decree. <Amended on Apr. 22, 2009>[This Article Wholly Amended on Jun. 13, 2008][Title Amended on Apr. 22, 2009]