Republic of Korea: Implemented Amendment to Cloud Security Assurance Program including data localisation requirements

On 31 January 2023, the amendment to the Cloud Computing Service Security Certification (CSAP) entered into force. Under the amendment, to obtain a CSAP certification by the Korea Internet and Security Agency (KISA), the service provider's cloud computing system and associated data, backup systems, and management and operating personnel must be located in Korea.