Journal of Information Security Reserach ›› 2021, Vol. 7 ›› Issue (E1): 71-.

Previous Articles     Next Articles

Data Security Governance Solutions for the Banking Industry

  

  • Online:2022-04-20 Published:2022-04-20

银行业数据安全治理解决方案

郑三丽;于国强;陈洪运;包英明   

  1. (北京天融信网络安全技术有限公司北京100193)
  • 通讯作者: 郑三丽 主要研究方向为数据安全、网络安全、安全运营. zheng_sanli@topsec.com.cn
  • 作者简介:郑三丽 主要研究方向为数据安全、网络安全、安全运营. zheng_sanli@topsec.com.cn 于国强 国家注册数据安全治理专业人员.主要研究方向为数据安全体系. yu_guoqiang@topsec.com.cn 陈洪运 主要研究方向为数据安全治理. chen_hongyun@topsec.com.cn 包英明 国家注册数据安全治理专业人员.主要研究方向为数据安全. bao_yingming@topsec.com.cn

Abstract: In the digital era, the data of the banking industry presents a state of large concentration. With the continuous innovation of financial technology, the banking industry faces more severe data security risks. The banking data security governance solution adopts scientific data security governance methods in accordance with external regulatory requirements, banking business characteristics and its own development needs, and conducts organization construction, management construction, and technology construction from top to bottom, and integrates governance evaluation and safe operation to build a data security governance system with banking characteristics, improve data security assurance capabilities, and it helps users to meet compliance requirements, resist attack threats, and achieve twoway promotion of data security and business development. The scheme can be directly copied and applied in the data security governance of the whole industry, and it also provides a reference for the data security governance of other industries.

Key words: data security, data security governance, classification and grading, full data life cycle, the solution

摘要: 在数字时代,银行业的数据呈现大集中状态,随着金融科技的不断创新,银行业面临更加严峻的数据安全风险.银行业数据安全治理解决方案根据外部监管要求、银行业务特点及自身发展的需要,采用科学的数据安全治理方法,自上而下进行组织建设、管理建设、技术建设,并融合治理评估、安全运营,构建具有银行业特色的数据安全治理体系,提升数据安全保障能力,帮助用户满足合规要求、抵御攻击威胁、实现数据安全与业务发展的双向促进.该方案在全行业的数据安全治理工作可直接复制应用,也为其他行业的数据安全治理工作提供参考.

关键词: 数据安全, 数据安全治理, 分类分级, 数据全生命周期, 解决方案