标准编号:ISO/TR 13569:2005
中文名称:银行和相关的金融设备 信息保密导则
英文名称:Financial services — Information security guidelines
发布日期:2005-11
标准范围
This Technical Report provides guidelines on the development of an information security programme forinstitutions in the financial services industry. It includes discussion of the policies, organization and thestructural, legal and regulatory components of such a programme. Considerations for the selection andimplementation of security controls, and the elements required to manage information security risk within amodern financial services institution are discussed. Recommendations are given that are based onconsideration of the institutions' business environment, practices and procedures. Included in this guidance isa discussion of legal and regulatory compliance issues, which should be considered in the design andimplementation of the programme.