T/CQJR 009-2024 Active

Scope: This document outlines the Internet lending business and typical business scenarios, and stipulates the data security requirements and general security requirements in typical business scenarios. This document is applicable to evaluating the data security capabilities of parties involved in the Internet lending business, and can also serve as a reference for parties involved in the Internet lending business to conduct data security capacity building. Main technical content: 1. Overview of Internet lending business 2. Overview of typical scenarios of Internet lending business 3. Data security requirements in typical scenarios: - Marketing and customer acquisition - Credit approval and contract signing - Loan disbursement and repayment - Post-loan management - Risk management - Asset management - Regulatory reporting - Management of cooperative institutions 4. General security requirements: - Security management - Data security system - Physical security - Log security - Information technology outsourcing - Business continuity