(3)The Minister of Information and Communication may order any business operator who has failed to take protective steps referred to in paragraph (1) to correct the situation within an appropriately fixed period. Article 47 (Certification of Information Protection and Management System) (1)Every information and communications service provider, as well as any individual who provides physical facilities used to provide the information and communications services, is suitable to provide information protection services pursuant to obtaining certification from the Korea Information Security Agency established pursuant to Article 52 regarding the quality of their comprehensive protection management system (hereafter referred to as the "information protection and management system"), including technical and physical protective measures designed and enacted to secure the safety and reliability of the information and communications networks. (2)The Minister of Information and Communication may establish and publish requisite standards for the certification referred to in paragraph (1), including standards for protecting and administering information. (3)Under the conditions as prescribed by the Ordinance of the Ministry of Information and Communication, any person who obtains a certification on the information protection and management system under paragraph (1) may label and publicize that certification. (4)The Ordinance of the Ministry of Information and Communication shall stipulate the method of, procedures for, fees for, and other requisite matters concerning the awarding of the certification referred to in paragraph (1). Article 48 (Prohibition on Act of Infiltrating into Information and Communications Networks) (1)Without a justifiable access right or beyond his permitted access right, any person shall be prohibited from infiltrating into information and communications networks. (2)Without a justifiable reason, any person shall be prohibited from the transmission or distribution of any program (hereafter referred to as a "malicious program") that may harm, disrupt, hamper, and destroy the information and communications system, or alter and falsify the data or programs. (3)Any person shall be prohibited from sending a large volume of signals or data for the purpose of hampering the operational stability of information and communications networks or from creating problems in information and communications networks through the use of inputting unapproved instructions processed.