SFMI has its information security policies and systems reviewed by external auditors on an annual basis.

• Facilities subject to audit: Samsung Fire & Marine Insurance digital financial infrastructure
• Auditor: six auditors from Financial Security Institute
• Audit period: August 27, 2020 ~ October 6, 2020 (25 business days in total)
• Subject of audit: information security management system, server, database, infrastructure configuration, network equipment,
  information security system equipment, web application, mobile application, mock hacking
• Man/Day: 137.5

Audit including vulnerability analysis and assessment was conducted as above

October 6, 2020
Financial Security Institute