Employees of the Korea Internet & Security Agency (KISA), which is responsible for the public's cybersecurity, were found to have been repeatedly disciplined for various misconduct over the past three years. As anxiety grows over hacking incidents, lax discipline at the "security control tower" has come under scrutiny.
According to audit data submitted by Rep. Kim Hyun, a secretary of the Science. ICT. Broadcasting. and Communications Committee (Democratic Party of Korea), from KISA, a total of 33 employees were disciplined for leaving the workplace, drunk driving, side jobs, and other violations from June 2022 through last month. By year, there were 2 in 2022, 25 in 2023, 3 in 2024, and 3 through last month this year, with cases concentrated in 2023.
The disciplinary measures were two dismissals, five suspensions, eight pay cuts, and 18 reprimands. An employee who took a medical leave and traveled abroad received a pay cut, and an employee who secretly held a side job received a reprimand. Employees caught leaving a business trip without authorization and promoting external products, and an employee who spent tens of millions of won on a corporate card at entertainment bars and lodging facilities, were dismissed. In Nov. 2023, four employees were caught drunk driving and received suspensions or reprimands.
During the same period, the number of hacking and virus consultations received by KISA totaled 62,471 in 2022, 48,631 in 2023, 34,149 in 2024, and 25,967 through August this year.
Kim Hyun said, "The public worries about personal data leaks, but KISA shows no effort to address lax discipline and a passive response."
In response, KISA explained, "We completed strong actions such as dismissals for the 2023 misconduct and have since strengthened internal inspections to apply measures to prevent recurrence," adding, "We will ensure similar cases do not occur going forward."