GB/T 36618-2018Information security technology—Specification for financial information service security (English PDF)
信息安全技术 金融信息服务安全规范
This is a limited preview
Buy now to download the full PDF (15 pages)
Need quotation for your management?
Get a formal quotation for GB/T 36618-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
September 17, 2018
Implementation date
April 1, 2019
Scope
GB/T 36618-2018 is the English-translated version of 信息安全技术 金融信息服务安全规范.
GB/T 36618-2018 sets security requirements for organizations that provide financial information services, that is, the signals, data, messages and reports on financial activities and markets.
It states the basic principles of the service: accuracy, integrity, availability, timeliness, credibility, compliance, non-repudiation, confidentiality and controllability.
It then covers the service process - collection, processing and provision of financial information - and the technical requirements for infrastructure, software, network, data and operational security and for disaster recovery.
The management requirements deal with institutional guarantees, responsibilities, personnel, training, risk management and outsourcing. It applies to the financial information services of domestic and foreign providers registered in China. It was issued on 17 September 2018 and has applied since 1 April 2019.
Found what you need?
Document preview — GB/T 36618-2018
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- Introduction
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Basic Principles
- 4.1 Accuracy
- 4.2 Integrity
- 4.3 Availability
- 4.4 Timeliness
- 4.5 Credibility
- 4.6 Compliance
- 4.7 Non-repudiation
- 4.8 Confidentiality
- 4.9 Controllability
- 5 Service Process Requirements
- 5.1 Overview
- 5.2 Financial Information Collection
- 5.2.1 Financial information source
- 5.2.2 Basic requirements for financial information collection
- 5.2.3 Financial Information Collection Method
- 5.3 Financial Information Processing and Processing
- 5.3.1 Basic requirements for processing and processing
- 5.3.2 Processing and processing methods
- 5.4 Financial Information Provision
- 5.4.1 Basic requirements for financial information provision
- 5.4.2 Mode
- 6 Technical requirements
- 6.1 Infrastructure Security
- 6.2 Software Security
- 6.3 Network Security
- 6.4 Data Security
- 6.4.1 Provider Data Security Requirements
- 6.4.2 User Data Security Requirements
- 6.5 Operational Safety
- 6.6 Disaster Recovery and Recovery
- 7 Management requirements
- 7.1 Institutional guarantee
- 7.2 Management Responsibilities
- 7.3 Personnel Management
- 7.4 Training and Education
- 7.5 Risk Management
- 7.6 Outsourcing Management
- Reference
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
Introduction
Financial information is of particular importance to national financial policy makers, financial institutions, and investment decision makers.
Financial information security is an integral part of national information security, and security issues such as information resources, information systems, and information networks are not only Affecting financial information service activities, and may affect national financial security, in order to improve the quality of financial information, improve the level of financial information services, This standard is specially formulated to maintain the healthy development of the market and protect the rights and interests of users.
This standard puts forward basic requirements for the internal management and security technology of financial information service providers, and the formulation of standards will be beneficial.
Financial information service providers regulate financial information service processes, prevent financial information service security risks, and continuously improve financial information services quality.
1 Scope
This standard specifies the basic principles, service process requirements, technical requirements and management of financial information service providers when providing financial information services. Requirements.
This standard applies to financial information services provided by domestic and foreign financial information service providers registered or registered in the territory of the People's Republic of China. activity.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 20271-2006 Information security technology information system general safety technical requirements
GB/T 20272-2006 Information security technology operating system security technical requirements
GB/T 20988-2007 Information Security Technology Information System Disaster Recovery Specification
GB/T 21028-2007 Information Security Technology Server Security Technical Requirements
GB/T 28827.1-2012 Operation and maintenance of information technology services - Part 1. General requirements
GB/T 28827.3-2012 Operation and maintenance of information technology services - Part 3.
GB/T 31500-2015 Information Security Technology Storage Media Data Recovery Service Requirements
GB/T 32924-2016 Information Security Technology Network Security Early Warning Guide
GB/T 33132-2016 Information Security Technology Information Security Risk Handling Implementation Guide
GB/T 33530-2017 Human Resources Outsourcing Service Specification
GB/T 33770.1-2017 Information technology service outsourcing Part 1. General requirements for service providers
3 Terms and definitions
The following terms and definitions apply to this document.
3.1 Financial information
Information that reflects the state of financial activity and the substance of its changes.
Note: Includes various signals, instructions, data, messages and reports related to financial activities and financial markets.
3.2 Financial information service
Provide financial activities and financial markets that may affect financial industries such as analysis, decision-making, trading, and liquidation, as well as related institutions and individuals. Information, data, software and related information technology activities.
3.3 Financial information service provider
An organization that provides financial information services.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 20271-2006Information security technology Common security techniques requirement for information system
- GB/T 20272-2006Cybersecurity technology — Technical specification for the security of operating systems
- GB/T 20988-2007Cybersecurity technology - Disaster recovery specifications for information systems
- GB/T 21028-2007Information security technology -- Security techniques requirement for server
- GB/T 28827.1-2012Information technology service—Operations and maintenance—Part 1: General requirements
- GB/T 28827.3-2012Information technology service - Operations and maintenance - Part 3: Emergency response specification
Similar standards
How to Download GB/T 36618-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 20271-2006 — Information security technology Common security techniques requirement for information system
GB/T 20988-2007 — Information security technology - Disaster recovery specifications for information systems
GB/T 21028-2007 — Information security technology -- Security techniques requirement for server
Secure payment via Stripe
Payments accepted
GB/T 36618-2018
$195.00