해킹사태 제재 장기전…롯데카드 '사후 복원력' 인정 받을까

Rising AI-powered cyber attacks are prompting regulators to shift enforcement criteria from breach prevention to post-incident recovery capability. Lotte Card's swift and transparent response illustrates that companies can mitigate regulatory penalties through effective incident management, aligning with the EU's DORA framework that prioritizes digital resilience over punitive measures.