Finance
Financial industry
Background and related requirements
<  Finance  >

Industry Background

On May 23, 2018, the General Office of China Banking Regulatory Commission issued the Notice on Strengthening the Security Risk Control of Production and Trading System of Banking Financial Institutions.

  • Strictly implement the management system of development, operation and maintenance and outsourcing

    Realize basic security functions such as identity authentication, access control, integrity check, data encryption, etc., and ensure that the scope of work of outsourced personnel is strictly controlled by means of authority control, behavior audit, regular inspection, etc.
  • Investigate potential safety hazards and repair system safety control defects

    1. Ensure that measures such as identity authentication and access control can effectively prevent risks such as system counterfeiting and ultra vires. 2. Strictly configure the access control policy based on IP address and network port. 3. Deliver it to the operation and maintenance personnel for use according to the "principle of minimum authorization".
  • Improve awareness of safety risk prevention and strengthen internal control management

    And clearly and strictly implement the responsibility of network security, continuously improve the ability of IT governance to perform its duties, and strengthen the remediation of IT risks.
<  Finance  >

Relevant Industry Policies

  • 2021.05

    "Measures for the Administration of Customer Identification and Preservation of Customer Identity Data and Transaction Records of Financial Institutions"

    Ensure that measures such as identity authentication and access control can effectively prevent risks such as system counterfeiting and ultra vires.
  • 2021.05

    "Guiding Opinions on Applying Safe and Controllable Information Technology to Strengthen Network Security and Informatization Construction of Banking Industry (No.39 Document)"

    By 2019, the utilization rate of safe and controllable information technology in the banking industry will reach about 75%; The utilization rate of controllable information technology in the banking industry is about 75%.