NS银行信息安全风险管理体系研究

发布时间：2018-04-18 05:33

本文选题：商业银行 + 信息安全　；参考：《中国海洋大学》2014年硕士论文

【摘要】：银行信息化一直以来都被视为商业银行的生命线。近年来,商业银行的业务量、业务种类快速增长,信息科技在商业银行的各项工作中得到了越来越广泛的应用,成为商业银行稳健、高效运营的基础,也是提高市场竞争力的的重要保障。信息科技一方面促进银行各项业务快速发展,另一方面随着银行对信息化的依赖度越来越高,银行也面临巨大的信息安全风险,一旦出现信息安全问题,将会直接影响到银行业务连续性,甚至会对银行产生巨大损失。信息安全风险日益成为影响银行稳健运行的一大隐患,直接关系到银行的运营和发展,商业银行必须高度重视信息安全风险管理,确保银行信息系统的安全稳定、持续有效运行。NS银行是经中国银行业监督管理委员会批准,在原农村信用合作联社的基础上,以新设合并方式由将4000名自然人股东和企业法人股东共同发起设立的股份制商业银行。近年来NS银行不断加快电子化建设,在信息安全管理方面做了一些工作,但仍然缺乏统一的信息安全风险管理体系。为有效防范和化解信息安全风险,确保各类信息系统的安全、稳定、持续有效运行,NS银行迫切需要建立科学有效的信息安全风险管理体系,保证银行各项业务稳健运营。本文通过对NS银行信息安全风险管理现状分析,找出风险管理方面的不足,在深入分析NS银行信息安全风险管理存在问题及产生原因的基础上,提出完善NS银行信息安全风险管理体系的对策与措施,也希望能为国内同质性商业银行提供一定的借鉴作用。本文先就银行信息安全风险管理的研究背景、目的和方法等进行介绍,对国内外信息安全风险管理研究现状进行了分析,然后对风险管理、信息安全风险管理等理论进行阐述。论文以这些理论为基础,着重分析了NS银行信息安全风险管理现状、信息安全风险管理体系存在的问题,针对这些问题,提出了完善NS银行信息安全风险管理体系的建议,从IT治理架构、制度建设、内外部监督和评价机制及业务连续性和应急管理体系建设等方面构建银行信息安全风险管理体系,提高银行信息安全风险管理水平,以更好地促进NS银行稳健持续运行,不断推动银行业务发展和创新。
[Abstract]:Bank informatization has always been regarded as the lifeline of commercial banks.In recent years, the business volume and business types of commercial banks have increased rapidly, and information technology has been more and more widely used in the various work of commercial banks, which has become the basis for the steady and efficient operation of commercial banks.It is also an important guarantee to improve the competitiveness of the market.On the one hand, information technology promotes the rapid development of banking services. On the other hand, as banks rely more and more on information technology, banks also face huge information security risks. Once information security problems arise,Will directly affect the bank business continuity, and even a huge loss to the bank.The risk of information security has increasingly become a hidden danger affecting the steady operation of banks, which is directly related to the operation and development of banks. Commercial banks must attach great importance to the management of information security risks to ensure the security and stability of bank information systems.The continued and effective operation of .NS Bank was approved by the China Banking Regulatory Commission, and on the basis of the former Rural Credit Cooperative Society,A joint-stock commercial bank established by a new merger of 4000 natural and corporate shareholders.In recent years, NS Bank has been speeding up the electronic construction and has done some work in information security management, but there is still a lack of unified information security risk management system.In order to effectively prevent and resolve the information security risks and ensure the security and stability of all kinds of information systems, it is urgent to establish a scientific and effective information security risk management system in order to ensure the steady operation of the bank's business.By analyzing the present situation of information security risk management in NS bank, this paper finds out the deficiency of risk management, and analyzes the problems and causes of information security risk management in NS bank.The paper puts forward the countermeasures and measures to perfect the information security risk management system of NS bank, and hopes to provide some reference for domestic homogeneous commercial banks.This paper first introduces the background, purpose and method of the risk management of bank information security, analyzes the present situation of the research on information security risk management at home and abroad, and then expounds the theory of risk management and information security risk management.Based on these theories, the paper analyzes the present situation of NS bank's information security risk management and the problems existing in the information security risk management system. In view of these problems, it puts forward some suggestions to perfect the NS bank's information security risk management system.From the aspects of IT governance structure, system construction, internal and external supervision and evaluation mechanism, business continuity and emergency management system construction, the bank information security risk management system is constructed to improve the bank information security risk management level.In order to better promote the steady and sustainable operation of NS Bank, continue to promote the development and innovation of banking business.
【学位授予单位】：中国海洋大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：F832.2

【相似文献】