数据安全能力成熟度模型在银行客户交易场景下的应用  

Application of the Data Security Capability Maturity Model in the Customer Transaction Scenario of the Bank

作　　者：刘远欢 邱红丽 李欣 杨胜 高领云 

机构地区：[1]广发银行股份有限公司

出　　处：《信息技术与标准化》2024年第S01期156-160,共5页Information Technology & Standardization

摘　　要：以提升数据安全能力为目标,采取分阶段、有序建设思路,逐步在存款、贷款、中间业务、信用卡、投资理财、支付结算、运营管理、网点渠道、互联网渠道等业务领域推广实践GB/T 37988—2019《信息安全技术数据安全能力成熟度模型》。通过推进数据安全治理体系、制度流程、技术工具与人员能力建设,规范了客户交易等重要业务场景的数据安全管理,有效控制、化解数据安全风险,提升了数据安全保障能力。With the goal of improving data security capability,the stadard of GB/T 37988—2019"Information security technology-Data security capability maturity model"is popularized and applicated in the feilds of deposit,loan,intermediate business,credit card,investment and financing,payment and settlement,operation and management,branch channels,internet channels,ect,in a phased and orderly way.By promoting the data security governance system,regulations,technical tools and personnel capacity,it stadardizes the data security management in important business scenarios such as customer transactions,effectively controlls and resolves data security risks,improves data security assurance capabilities.

关 键 词：数据安全 银行 客户交易 成熟度 

分 类 号：F832.2[经济管理—金融学] F274[自动化与计算机技术—计算机系统结构] TP309.2[自动化与计算机技术—计算机科学与技术]