关键词: 电子支付, 信息安全, 安全管理体系, 风险评估, 安全度量

Abstract: At present, with the rapid development of mobile Internet technology, payment network, as an important part of financial informationization, is developing towards more open and diversified, and becoming increasingly dependent on information technology. Safeguarding network security and preventing systemic financial risks have become an urgent need for national requirements and payment networks. Firstly, this paper introduces the status and challenges of information security management in an open electronic payment network environment,then, we analyze the relevant standards of information security management. Finally, we focus on the information security in the open payment network environment from the practice of the authors enterprise, in order to explore innovations and breakthroughs in information security management systems.

Key words: electronic payment, information security, security management system, risk assessment, security metrics