KT Corp Obtains ISO/IEC 18974 Certification for Open Source Software Security

Seoul, South Korea—KT Corp (030200. KS) announced on Monday that it has obtained the ISO/IEC 18974 certification, an international standard for strengthening open-source software security management.

The ISO/IEC 18974 standard, defined by the OpenChain Project under the Linux Foundation, sets open-source software security management systems criteria. 

This certification recognizes organizations with systematic and consistent open-source software security management capabilities.

While widely used due to its accessible source code, open-source software can potentially harbor more security vulnerabilities. 

If such software with security weaknesses enters the supply chain, it could compromise the security of entire systems.

KT has now secured the ISO/IEC 5230 certification for open source license compliance, obtained last year, and the ISO/IEC 18974. 

This dual certification enhances the company's standing as an organization committed to open-source security and compliance standards.

KT employs an open-source management portal for systematic license and security checks and tracking to ensure compliance with open-source standards. 

The company has also established an OpenSource Review Board (OSRB) to swiftly address legal and security issues related to open-source usage.

Kyung-hwa Ok, Executive Vice President of KT's IT Platform Division, stated, "Following last year's ISO/IEC 5230 certification, this ISO/IEC 18974 international standard certification acknowledges KT's capabilities in utilizing open source software."

Ok added, "As open source software becomes increasingly important in the IT industry, KT will continue to strengthen its open source software capabilities while adhering to global standards."

The OpenChain Project's certification aims to increase trust among supply chain participants by recognizing organizations with ISO/IEC 18974 certification that meet specified security criteria.