T/NIFA 9-2021 Mobile financial client application security testing specification

Scope

Scope: This document is applicable to the security testing of mobile financial client applications conducted by testing institutions, and provides reference for related units in the design, development, integration, and maintenance of client applications. This document is also applicable to the safety and standard compliance testing and certification of related products and application systems conducted by testing and certification institutions. Client applications are divided into fund transaction types, information collection types, and information query types. The scope of application of each type of software is referenced in Appendix A: Application Software Testing Scope; Main technical content: This document specifies the security requirements for mobile financial client applications, as well as the management requirements for the design, development, maintenance, and release of client applications.

Development Information

Related Standards