商業(yè)銀行信息科技風(fēng)險(xiǎn)現(xiàn)場(chǎng)檢查指南

1、1商業(yè)銀行信息科技風(fēng)險(xiǎn)現(xiàn)場(chǎng)檢查指南3檢查項(xiàng)3：制度執(zhí)行.........................................................................................................374.3人員管理...............................................................................

2、...........................................38檢查項(xiàng)1：人員管理.........................................................................................................384.4安全評(píng)估報(bào)告..................................................

3、................................................................39檢查項(xiàng)1：安全評(píng)估報(bào)告.................................................................................................394.5宣傳、教育和培訓(xùn).................................

4、..........................................................................39檢查項(xiàng)1：宣傳、教育和培訓(xùn)..........................................................................................395.系統(tǒng)開(kāi)發(fā)、測(cè)試與維護(hù)...........................

5、....................................................................................415.1開(kāi)發(fā)管理...........................................................................................................................41檢查

6、項(xiàng)1：管理架構(gòu).........................................................................................................41檢查項(xiàng)2：制度建設(shè).................................................................................................

7、........43檢查項(xiàng)3：項(xiàng)目控制體系.................................................................................................44檢查項(xiàng)4：系統(tǒng)開(kāi)發(fā)的操作風(fēng)險(xiǎn).....................................................................................4

8、5檢查項(xiàng)5：數(shù)據(jù)繼承和遷移.............................................................................................465.2系統(tǒng)測(cè)試與上線(xiàn)......................................................................................................

9、.........47檢查項(xiàng)1：系統(tǒng)測(cè)試.........................................................................................................47檢查項(xiàng)2：系統(tǒng)驗(yàn)收....................................................................................

10、.....................49檢查項(xiàng)3：投產(chǎn)上線(xiàn).........................................................................................................495.3系統(tǒng)下線(xiàn)..........................................................................

11、.................................................50檢查項(xiàng)1：系統(tǒng)下線(xiàn).........................................................................................................506.系統(tǒng)運(yùn)行管理.............................................

12、...............................................................................526.1日常管理..........................................................................................................................52檢查項(xiàng)1：職責(zé)分

13、離.........................................................................................................52檢查項(xiàng)2：值班制度.......................................................................................................

14、..53檢查項(xiàng)3：操作管理.........................................................................................................53檢查項(xiàng)4：人員管理...........................................................................................

15、..............546.2訪(fǎng)問(wèn)控制策略..................................................................................................................55檢查項(xiàng)1：物理訪(fǎng)問(wèn)控制策略..................................................................

16、.......................55檢查項(xiàng)2：邏輯訪(fǎng)問(wèn)控制策略.........................................................................................56檢查項(xiàng)3：賬號(hào)及權(quán)限管理...............................................................................

17、..............57檢查項(xiàng)4：用戶(hù)責(zé)任及終端管理.....................................................................................58檢查項(xiàng)5：遠(yuǎn)程接入的控制...........................................................................................

18、..596.3日志管理..........................................................................................................................60檢查項(xiàng)1：審計(jì)日志檢查..........................................................................

19、.......................60檢查項(xiàng)2：日志信息的保護(hù).............................................................................................60檢查項(xiàng)3：操作日志的檢查............................................................................

20、.................61檢查項(xiàng)4：錯(cuò)誤日志的檢查.............................................................................................616.4系統(tǒng)監(jiān)控.......................................................................................

21、....................................62檢查項(xiàng)1：基礎(chǔ)環(huán)境監(jiān)控.................................................................................................62檢查項(xiàng)2：系統(tǒng)性能監(jiān)控.............................................................

22、....................................62檢查項(xiàng)3：系統(tǒng)運(yùn)行監(jiān)控.................................................................................................63檢查項(xiàng)4：測(cè)評(píng)體系...............................................................