中小商业银行数据安全体系建设探索与实践

Exploration and Practice of Data Security System Construction of Small and Medium-sized Commercial Banks

近年来,中小商业银行大力发展电子交易,根据上市银行2021年年报显示,上市银行电子交易替代率普遍都超过了90%;江苏苏宁银行作为一家新型数字银行,99%的客户来自线上、99%的交易来自线上、99%的审批线上完成。银行作为大量数据的拥有者,在将这些数据安全地应用于开发、测试、数据分析、数据建模等场景过程中,面临数据安全管理规则不明确、数据泄露风险、数据共享风险这三大风险挑战。需建立数据安全组织制度及流程,建立多维度的数据安全防护体系,完善基于数据分类分级的数据安全共享使用体系,形成具有强大数据汇聚采集能力、高度数据共享开放能力和广泛数据应用分析挖掘能力的大数据发展新格局。

In recent years,small and medium-sized commercial banks have vigorously developed electronic transactions.According to the 2021 annual report of listed banks,the substitution rate of electronic transactions of listed banks has generally exceeded 90%;Jiangsu Suning Bank,as a new digital bank,99%of its customers are online,99%of its transactions are online,and 99%of its approvals are completed online.As the owner of a large amount of data,how to safely apply these data to development,testing,data analysis,data modeling and other scenarios faces three major risk challenges:unclear data security management rules,data leakage risk and data sharing risk.It is necessary to establish data security organization system and process construction,establish multi-dimensional data security protection system,and improve data security sharing and use system based on data classification and classification.Build a new pattern of big data development with strong data aggregation and collection capabilities,high data sharing and openness capabilities,and extensive data application analysis and mining capabilities.