个人金融信息全生命周期安全管理实践  

Personal Financial Information Full Life Cycle Security Management Practices

作　　者：卓柳俊 左鹏飞 胡国华 王振东 李强 ZHUO Liujun;ZUO Pengfei;HU Guohua;WANG Zhendong;LI Qiang(Shanghai Beishan Data Technology Co.Ltd.,Shanghai 210203,China;Chery Huiyin Automotive Finance Co.Ltd.,Wuhu 241000,Anhui,China)

机构地区：[1]上海北山数据科技有限公司,上海210203 [2]奇瑞徽银汽车金融股份有限公司,安徽芜湖241000

出　　处：《科技和产业》2024年第22期184-189,共6页Science Technology and Industry

摘　　要：对我国金融机构的数据全生命周期管理现状进行调查,分析了金融机构数据安全治理现状。研究表明,金融机构应以数据为中心构建安全合规体系,将数据全生命周期管理视为闭环,综合考虑各数据处理环节的安全合规风险,旨在贯彻数据安全治理理念,提高个人金融信息保护能力,确保个人金融信息在收集、存储、使用、加工、传输、提供、公开、删除等环节都能被有效地、动态地保护和实时监测。The current situation of data security governance of financial institutions in China was analysed by investigating the current situation of full life cycle management of data in financial institutions in China.The study shows that financial institutions should construct a security compliance system centred on data,consider the full life cycle management of data as a closed loop,and comprehensively consider the security compliance risks of each data processing link,with the aim of implementing the concept of data security governance,improving the ability to protect personal financial information,and ensuring that personal financial information can be effectively and dynamically collected,stored,used,processed,transmitted,made available,disclosed,deleted,etc.,to be protection and real-time monitoring.

关 键 词：个人金融信息 数据安全 数据合规 数据生命周期 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]