T/PCAC 0008-2020 Active Group standards

T/PCAC 0008-2020 Commercial bank application program interface security management detection specification

Publish Date: 2020-11-20 Implement Date: 2020-11-20 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/PCAC 0008-2020

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Economic and cultural

ICS Name: The application of information technology in banks

Publish Date: 2020-11-20

Implement Date: 2020-11-20

Scope

Main technical content: The detection standard clarifies the scope of application, the basis for detection, and the detection purposes, testing process, and passing standards for each detection item of commercial bank application interfaces. The "Detection Standard for Security Management of Commercial Bank Application Interfaces" includes 11 aspects: commercial bank security design detection, commercial bank security deployment detection, commercial bank security integration detection, commercial bank security operation and maintenance detection, commercial bank service termination and system offline detection, commercial bank security management detection, application-side security design detection, application-side security deployment detection, application-side security integration detection, application-side security operation and maintenance detection, and application-side security management detection. Commercial bank security design detection mainly includes: basic requirements, interface security design, service security design, etc. Commercial bank security deployment detection mainly includes: interface service layer deployment requirements, etc. Commercial bank security integration detection mainly includes: application-side approval, access security control, operational security, application-side exit, etc. Commercial bank security operation and maintenance detection mainly includes: security monitoring, risk control, change control, operation and maintenance inspection, incident handling, etc. Commercial bank service termination and system offline detection mainly focuses on whether the bank has established systems and procedures for service termination and system offline. Commercial bank security management detection mainly includes: management systems, application security responsibilities, application audits, etc. Application-side security design detection mainly includes: interface security design, service security design, etc. App