Upbit procures ISO 22301 certification
Dunamu, the blockchain and fintech firm that operates South Korea’s largest crypto exchange Upbit, announced Wednesday (local time) that Upbit has obtained the ISO 22301 certification, an international standard for security and resilience that evaluates a company’s business continuity management system (BCMS) based on its ability to protect against and respond to disruptive events. The firm disclosed that it acquired the certification from the U.S. International Accreditation Service (IAS) on Nov. 6.

Navigating risk management
More specifically, the ISO 22301 certification evaluates a company’s ability to maintain uninterrupted and stable business operations through the prevention, response and recovery in the event of accidents, man-made or natural disasters and more. It offers several benefits for companies, such as proof of compliance with legal requirements, which serves as a marketing advantage, and the prevention of large-scale damage.
To obtain the certification, companies must prepare in advance for unexpected disruptions by analyzing the level of impact that such events can have on business operations and the amount of time needed to recover, then put relevant policies in place to facilitate recovery. To maintain the certification, enterprises must also undergo an annual follow-up audit and a renewal audit every three years.
Commitment to business resilience
“We obtained the certification to protect user assets and provide safe services that do not stop in the face of external influences,” Dunamu said, emphasizing its commitment to enhancing service reliability and protecting investors. “We will not stop our efforts to become the most trusted cryptocurrency exchange.”
Upbit has previously acquired other ISO certifications, such as the ISO 27001 for information security; the ISO 27017 for information security in cloud computing; and the ISO 27701 for privacy management. The exchange also obtained ISMS-P in 2021, a certificate administered by Korea’s Ministry of Science and ICT and Personal Information Protection Commission for information security and personal information management.


