T/HMSJRXH 001-2023 Active

Main technical content: This standard is a normative document formulated based on national and industry standards, combined with the actual situation of legal person banking financial institutions, to regulate the construction of security in software development. The purpose of formulating this standard is to clarify the information security standards that need to be followed in software development. According to this standard, software developers should standardize the work of software security requirement analysis, security design, security coding, and security testing throughout the entire life cycle of software development, reduce and control software security vulnerabilities and security risks, improve software security protection capabilities, and ultimately develop high-quality software that meets the information security standards of legal person banking financial institutions.