关键词: 供应链, 信息安全, 第三方管理, 数据安全, 金融科技

Abstract: Supply chain is an increasingly complex global network composed of a large and growing number of thirdparty partners. For financial institutions, supply chain information security is particularly important for ensuring the security of user funds and personal information. Therefore, it is necessary to plan and build a secure and controllable supply chain information security system in advance. This paper mainly analyzes the information and communication technology (ICT) supply chain information security risks of financial institutions, and proposes a comprehensive prevention and control system framework for ICT supply chain information security based on the entire lifecycle. Through the closedloop management process and technical measures of this framework, precise prevention and control of ICT supply chain information security in financial institutions can be achieved, thereby ensuring the safe and stable operation and development of financial business.

Key words: supply chain;information security;third party management, data security;Fintech