Current location - Quotes Website - Signature design - Kneel for a copy of the Measures for the Administration of Electronic Records in Banks. There is a great god, you know? Thanks in advance!
Kneel for a copy of the Measures for the Administration of Electronic Records in Banks. There is a great god, you know? Thanks in advance!
/view/5c4640433687e21af45a90b.html is really gone. You should ask the banking system. This estimate is rarely taken out.

/view/5c46404333687e21af45a90b.html You can find it in this Baidu file to see if it is what you want.

Chapter I General Principles

Article 1 In order to strengthen the risk management of electronic banking business, protect the legitimate rights and interests of customers and banks, and promote the healthy and orderly development of electronic banking business, these Measures are formulated in accordance with the Banking Supervision Law of the People's Republic of China, the Commercial Bank Law of People's Republic of China (PRC) and the Regulations of People's Republic of China (PRC) on the Administration of Foreign-funded Financial Institutions.

Article 2 The term "electronic banking" as mentioned in these Measures refers to the banking services provided to customers by commercial banks and other banking financial institutions through communication channels or public networks open to the public, as well as the private networks established by banks for specific self-service equipment or customers.

E-banking business includes banking business conducted through computers and the Internet (hereinafter referred to as online banking business), banking business conducted through voice devices such as telephones and telecommunication networks (hereinafter referred to as telephone banking business), banking business conducted through mobile phones and wireless networks (hereinafter referred to as mobile banking business), and other banking businesses in which customers use electronic service equipment and networks to complete financial transactions through self-service.

Article 3 Banking financial institutions and foreign-funded financial institutions established in accordance with the Regulations of People's Republic of China (PRC) Municipality on the Administration of Foreign-funded Financial Institutions (hereinafter referred to as financial institutions) shall conduct electronic banking business in accordance with the provisions of these Measures.

Financial asset management companies, trust and investment companies, finance companies, financial leasing companies established within the territory of People's Republic of China (PRC) and other financial institutions that have been approved by the China Banking Regulatory Commission (hereinafter referred to as the China Banking Regulatory Commission) to offer electronic financial services with the nature of electronic banking shall be governed by the relevant provisions of these Measures on financial institutions providing electronic banking services.

Article 4 With the approval of the China Banking Regulatory Commission, financial institutions may offer e-banking services in People's Republic of China (PRC), provide e-banking services to enterprises, residents and other customers in People's Republic of China (PRC), or provide cross-border e-banking services in accordance with the relevant provisions of these Measures.

Article 5 Financial institutions shall follow the principles of rational planning, unified management and ensuring the safe operation of the system to ensure the healthy and orderly development of e-banking business.

Article 6 Financial institutions shall, according to the characteristics of e-banking, establish and improve the risk management system and internal control system of e-banking, set up corresponding management institutions, clarify the responsibilities of e-banking management, and effectively identify, evaluate, monitor and control the risks of e-banking.

Article 7 China Banking Regulatory Commission is responsible for the supervision and administration of electronic banking.

Chapter II Application and Modification Article 8 A financial institution shall apply to or report to the China Banking Regulatory Commission in accordance with the relevant provisions of these Measures for establishing electronic banking business in People's Republic of China (PRC). Article 9 A financial institution shall meet the following conditions when launching electronic banking business: (1) The business activities of the financial institution are normal, and a relatively complete risk management system and internal control system have been established, and no major accidents have occurred in the main information management system and business processing system of the financial institution within one year before applying for launching electronic banking business; (2) Formulating the overall development strategy, development plan and e-banking security strategy, and establishing the organizational system and institutional system of e-banking risk management. (3) According to the development plan and security strategy of e-banking, the infrastructure and system for the operation of e-banking have been established, and necessary security checks and business tests have been carried out on relevant facilities and systems; (4) conducting safety assessment on the risk management of electronic banking business, and ensuring that the business operation facilities and systems meet the regulatory requirements; (5) A clear electronic banking management department has been established, equipped with qualified managers and technicians; (6) Other conditions as required by China Banking Regulatory Commission.

Article 10 Financial institutions that provide online banking, mobile banking and other electronic banking services through the Internet shall meet the following conditions in addition to those listed in Article 9: (1) Electronic banking infrastructure and equipment can ensure the normal operation of electronic banking; (2) The electronic banking system has the necessary business processing capacity and can meet the needs of customers for timely business handling; (3) Establish an effective external attack detection mechanism; (4) The electronic banking operating system and business processing server of Chinese-funded banking financial institutions are located in People's Republic of China (PRC); E-banking operating systems and business processing servers of foreign-funded financial institutions may be located in People's Republic of China (PRC) or overseas. When it is established overseas, facilities and equipment capable of recording and saving business transaction data shall be set up in People's Republic of China (PRC) and China, which can meet the requirements of on-site inspection by financial supervision departments and investigation and evidence collection by domestic judicial institutions in case of legal disputes.

Article 11 To start e-banking business, a foreign-funded financial institution shall not only meet the conditions listed in Articles 9 and 10, but also establish a business institution in People's Republic of China (PRC) in accordance with the relevant provisions of laws and administrative regulations, and the regulatory authorities in the country (region) where it is located have the legal framework and regulatory capacity to supervise e-banking business. Article 12 When financial institutions apply for launching electronic banking business, according to different types of electronic banking business, the examination and approval system and the reporting system shall be implemented respectively. (1) The examination and approval system is applicable to the electronic banking business carried out by using open networks such as the Internet or wireless networks, including online banking, mobile banking and electronic banking business carried out by using personal data auxiliary devices such as handheld computers; (two) the use of domestic or regional telecommunications networks, wired networks and other electronic banking services, the application of the declaration system; (3) Unless otherwise specified, laws, regulations and administrative rules shall apply to the electronic banking business carried out by banks for specific self-service equipment or private networks established with customers, and there is no applicable reporting system. After starting electronic banking business, financial institutions establish direct network connection with their specific customers to provide related services, which belongs to the daily service of electronic banking and does not belong to the application type for starting electronic banking business.

Article 13 Before a financial institution applies for launching an electronic banking business that requires approval, it shall communicate with the China Banking Regulatory Commission on the business it intends to apply for, explain the design and construction scheme of the electronic banking business system and infrastructure it intends to apply for, and the basic business operation mode, and adjust the relevant scheme according to the communication. After supervision and communication, financial institutions should build the electronic banking system according to the adjusted and improved scheme, and complete the internal testing of relevant systems before application. The internal test object is limited to the internal personnel of financial institutions, relevant personnel of outsourcing institutions and staff of relevant institutions, and shall not be extended to ordinary customers. Article 14 When a financial institution applies for electronic banking, it may apply for different types of electronic banking at the same time in an application report, but the type of electronic banking applied for shall be indicated in the application. Article 15 A financial institution shall submit the following documents and materials (in triplicate) when applying to the China Banking Regulatory Commission or its dispatched office for launching electronic banking business: (1) An application report for launching electronic banking business signed by the legal representative of the financial institution; (2) The type of electronic banking business to be applied for and the type of business to be carried out; (3) e-banking business development plan; (4) Introduction to the operating facilities and technical systems of electronic banking; (5) Test report on the electronic banking business system; (6) An evaluation report on the security of electronic banking; (7) Emergency plan and business continuity plan for electronic banking business operation; (eight) the risk management system of electronic banking business and the corresponding rules and regulations; (nine) the introduction of the management department and responsibilities of the electronic banking business and the main person in charge; (ten) the applicant's contact person and telephone, fax, email and other contact information; (eleven) other documents and materials required by the China Banking Regulatory Commission. (To be continued)

Article 16 After receiving the relevant application materials of financial institutions, the CBRC or its dispatched offices shall inform the financial institutions of the relevant requirements at one time when they request commercial banks to supplement the materials according to the regulatory needs. Financial institutions shall, according to the requirements of the China Banking Regulatory Commission or its dispatched offices, re-compile and bind the application materials, and correct the submission date of the materials. Article 17 The China Banking Regulatory Commission (hereinafter referred to as the CBRC) or its dispatched office shall make a written decision on approval or disapproval within 3 months from the date of receiving the complete application materials for the electronic banking business that needs approval from financial institutions. If it decides not to approve, it shall explain the reasons. Article 18 When a financial institution applies for various electronic banking services in the application report, the China Banking Regulatory Commission (hereinafter referred to as CBRC) or its dispatched office may approve all or part of the application for electronic banking services according to relevant regulations and requirements. For electronic banking business types that have not been approved by the CBRC or its dispatched offices, financial institutions may re-apply according to relevant regulations. Article 19 Financial institutions do not need to apply for the types of e-banking business applicable to the reporting system, but should refer to the relevant provisions of Article 15 and submit relevant materials to the China Banking Regulatory Commission or its dispatched office 1 month before starting the e-banking business. Article 20 After launching e-banking, financial institutions can use the e-banking platform to publicize and sell traditional banking products and services, and can also develop new business types according to the characteristics of e-banking. Financial institutions shall abide by relevant laws, regulations and business management rules when using e-banking platform to publicize related banking products or services. When using e-banking platform to sell related banking products or services, we should carefully analyze and select products suitable for e-banking. Electronic banking shall not be used to sell banking products that require face-to-face evaluation or face-to-face confirmation of customers, unless otherwise stipulated by laws, regulations and administrative rules. Twenty-first financial institutions to increase or change the types of electronic banking business according to the needs of business development, the approval system or filing system is applicable. Article 22 The examination and approval system is applicable to financial institutions that add or change the following types of electronic banking services: (1) Financial institutions that need examination and approval according to relevant laws, regulations and administrative rules but have not applied for approval and are ready to start using electronic banking services; (2) When financial institutions apply the approved business to e-banking, they need direct real-time data exchange with securities and insurance related institutions before implementation; (3) financial institutions jointly carry out through the Internet e-banking platform; (4) Providing cross-border electronic banking services. Use props to make a report

Article 23 A financial institution shall submit the following documents and materials (in triplicate) to the China Banking Regulatory Commission or its dispatched office when adding or changing the types of electronic banking business that need approval: (1) An application for adding or changing the types of business signed by the legal representative of the financial institution; (2) Adding or changing the definition and operation process of business types; (3) Risk characteristics and preventive measures of the business types to be added or changed; (4) Relevant management rules and regulations; (five) the applicant's contact person and telephone, fax, email and other contact information; (6) Other documents and materials required by China Banking Regulatory Commission. Article 24 A banking financial institution (hereinafter referred to as a national financial institution) whose business activities are not restricted by geographical areas shall apply to China Banking Regulatory Commission for starting electronic banking business or adding or changing the types of electronic banking business that need approval. In accordance with the relevant regulations, banking financial institutions (hereinafter referred to as regional financial institutions) that can only engage in business activities in a certain city or region should apply for launching electronic banking business or adding or changing the types of electronic banking business that need approval, and their legal person institutions should apply to the local CBRC. Foreign-funded financial institutions applying for opening electronic banking business or adding or changing the types of electronic banking business that need approval shall apply to the China Banking Regulatory Commission by their head office (company) or the main reporting bank in People's Republic of China (PRC). Article 25 The CBRC or its dispatched office shall make a written decision on approval or disapproval within 3 months from the date of receiving the complete application materials for financial institutions to increase or change the types of electronic banking services that need approval; If it decides not to approve, it shall explain the reasons. Article 26 The reporting system is applicable to other types of electronic banking business. Financial institutions do not need to apply for increase or change, but should submit relevant materials to the China Banking Regulatory Commission or its dispatched office 1 month before starting such business, referring to the relevant provisions of Article 23. Twenty-seventh banking financial institutions that have realized centralized processing of business data and system integration (hereinafter referred to as centralized data processing) may authorize their branches to start part or all of electronic banking business after being approved to start electronic banking business. Before carrying out relevant business, its branches shall report to the local agency of China Banking Regulatory Commission. For banking financial institutions that have not realized centralized data processing, if their branch e-banking business processing system is independent from the headquarters, the branch e-banking business shall be managed with reference to the e-banking business of regional financial institutions, and the authorization document of the head office shall be used to apply or report to the local CBRC dispatched office in accordance with relevant regulations. Other branches only need to hold the authorization document of their head office and report it to the local CBRC agency before they can carry out related business. After a foreign-funded financial institution is approved to start e-banking business, its domestic branches shall report to the local CBRC agency with the authorization document of its head office (company). Article 28 When a financial institution that has started electronic banking decides to terminate all or part of the electronic banking business as planned, it shall report the reasons for terminating the electronic banking business and the solutions to related problems to the China Banking Regulatory Commission three months in advance, and make an announcement at the same time. When a financial institution decides to suspend some types of electronic banking business as planned, it shall report to the China Banking Regulatory Commission and make an announcement 1 month before the suspension. When financial institutions terminate electronic banking services or suspend some types of business, they must take effective measures to protect the legitimate rights and interests of customers and formulate effective solutions for possible problems. Article 29 When a financial institution needs to restart the electronic banking business or restart the stopped business type after terminating the electronic banking service or stopping some business types, it shall re-apply or handle it in accordance with relevant regulations. Thirtieth financial institutions need to suspend electronic banking services as planned due to the upgrading and debugging of the electronic banking system, they should choose the appropriate time to minimize the impact on customers, and make an announcement on their websites at least three days in advance. If the electronic banking service is suspended for more than 4 hours during normal working hours or 8 hours outside normal working hours due to unexpected events or accidental factors, the financial institution shall report the relevant situation to the CBRC within 24 hours after the suspension of service, and report the cause, impact, remedial measures and handling of the accident to the CBRC within 3 days after the accident basically ends. Use props to make a report

Chapter III Risk Management Article 31 Financial institutions shall incorporate the risk management of electronic banking into their overall framework of risk management, and establish and improve the risk management system of electronic banking and the internal control system for the safe and steady operation of electronic banking according to the operating characteristics of electronic banking. Article 32 The risk management system and internal control system of electronic banking of financial institutions shall have clear management framework, perfect rules and regulations and strict internal authorization control mechanism, which can effectively identify, evaluate, monitor and control the strategic risks, operational risks, legal risks, reputation risks, credit risks and market risks faced by electronic banking business. Article 33 Prudent risk management principles and measures formulated by financial institutions for traditional business risks are also applicable to e-banking business, but financial institutions should make necessary and appropriate revisions to the original risk management systems, rules and procedures according to changes in the business environment and operation mode of e-banking. Article 34 The board of directors and senior management of a financial institution shall, according to the overall development strategy and actual operation of the institution, formulate the development strategy and feasible operation and investment strategy of e-banking, conduct continuous comprehensive benefit analysis on the operation of e-banking and scientifically evaluate the impact of e-banking on the overall risk of the financial institution. Thirty-fifth financial institutions should strengthen the protection of intellectual property rights in electronic banking business when formulating the development strategy of electronic banking business. Article 36 Financial institutions shall evaluate and classify the importance of different systems, risk facilities, information and other resources of electronic banking and their impact on the security of electronic banking, formulate corresponding security strategies, establish and improve risk control procedures and safe operation procedures, and take corresponding security management measures. All kinds of safety control measures should be checked and tested regularly, and adjusted in time according to the actual situation to ensure the continuous, effective and timely update of safety measures. Article 37 Financial institutions shall ensure the safety of the operating facilities and equipment, safety control facilities and equipment of electronic banks, and take appropriate protective measures for important facilities, equipment and data of electronic banks. (a) the physical safety control of physical places must meet the requirements of relevant national laws, regulations and safety standards. For the safety control of physical places without uniform safety standards, financial institutions should ensure that the safety system they formulate effectively covers the main risks that may be faced; (2) The electronic banking system based on the open network should reasonably set up and use security products and technologies such as firewalls and anti-virus software to ensure that electronic banking has sufficient anti-attack, anti-virus and intrusion protection capabilities; (3) For the contact, inspection, maintenance and emergency treatment of important facilities and equipment, there should be a clear definition of authority, division of responsibilities and operational procedures, and a log file management system should be established to truthfully record and properly keep relevant records; (4) For important technical parameters, the contact authority should be strictly controlled, the corresponding technical parameter adjustment and change mechanism should be established, and the leakage of relevant technical parameters can be effectively prevented after the replacement of key personnel; (5) For key positions and key personnel in e-banking management, the system of rotation and compulsory leave should be implemented, and a strict internal supervision and management system should be established. Thirty-eighth financial institutions should adopt appropriate encryption technologies and measures to ensure the security and confidentiality of electronic transaction data transmission, as well as the integrity, authenticity and non-repudiation of the transmitted transaction data. The data encryption technology adopted by financial institutions should comply with the relevant provisions of the state, and according to the security requirements of electronic banking business and the development of scientific and technological information technology, regularly check and evaluate the strength of the encryption technology and algorithm used, and adjust the encryption method in time. Article 39 A financial institution shall sign an e-banking service agreement or contract with its customers to clarify the rights and obligations of both parties. In the e-banking service agreement, financial institutions should fully reveal to customers the risks that may be faced when using e-banking, the risk control measures that financial institutions have taken and the risk control measures that customers should take, and the responsibilities for related risks. Use props to make a report

Chapter III Risk Management Article 31 Financial institutions shall incorporate the risk management of electronic banking into their overall framework of risk management, and establish and improve the risk management system of electronic banking and the internal control system for the safe and steady operation of electronic banking according to the operating characteristics of electronic banking. Article 32 The risk management system and internal control system of electronic banking of financial institutions shall have clear management framework, perfect rules and regulations and strict internal authorization control mechanism, which can effectively identify, evaluate, monitor and control the strategic risks, operational risks, legal risks, reputation risks, credit risks and market risks faced by electronic banking business. Article 33 Prudent risk management principles and measures formulated by financial institutions for traditional business risks are also applicable to e-banking business, but financial institutions should make necessary and appropriate revisions to the original risk management systems, rules and procedures according to changes in the business environment and operation mode of e-banking. Article 34 The board of directors and senior management of a financial institution shall, according to the overall development strategy and actual operation of the institution, formulate the development strategy and feasible operation and investment strategy of e-banking, conduct continuous comprehensive benefit analysis on the operation of e-banking and scientifically evaluate the impact of e-banking on the overall risk of the financial institution. Thirty-fifth financial institutions should strengthen the protection of intellectual property rights in electronic banking business when formulating the development strategy of electronic banking business. Article 36 Financial institutions shall evaluate and classify the importance of different systems, risk facilities, information and other resources of electronic banking and their impact on the security of electronic banking, formulate corresponding security strategies, establish and improve risk control procedures and safe operation procedures, and take corresponding security management measures. All kinds of safety control measures should be checked and tested regularly, and adjusted in time according to the actual situation to ensure the continuous, effective and timely update of safety measures. Article 37 Financial institutions shall ensure the safety of the operating facilities and equipment, safety control facilities and equipment of electronic banks, and take appropriate protective measures for important facilities, equipment and data of electronic banks. (a) the physical safety control of physical places must meet the requirements of relevant national laws, regulations and safety standards. For the safety control of physical places without uniform safety standards, financial institutions should ensure that the safety system they formulate effectively covers the main risks that may be faced; (2) The electronic banking system based on the open network should reasonably set up and use security products and technologies such as firewalls and anti-virus software to ensure that electronic banking has sufficient anti-attack, anti-virus and intrusion protection capabilities; (3) For the contact, inspection, maintenance and emergency treatment of important facilities and equipment, there should be a clear definition of authority, division of responsibilities and operational procedures, and a log file management system should be established to truthfully record and properly keep relevant records; (4) For important technical parameters, the contact authority should be strictly controlled, the corresponding technical parameter adjustment and change mechanism should be established, and the leakage of relevant technical parameters can be effectively prevented after the replacement of key personnel; (5) For key positions and key personnel in e-banking management, the system of rotation and compulsory leave should be implemented, and a strict internal supervision and management system should be established. Thirty-eighth financial institutions should adopt appropriate encryption technologies and measures to ensure the security and confidentiality of electronic transaction data transmission, as well as the integrity, authenticity and non-repudiation of the transmitted transaction data. The data encryption technology adopted by financial institutions should comply with the relevant provisions of the state, and according to the security requirements of electronic banking business and the development of scientific and technological information technology, regularly check and evaluate the strength of the encryption technology and algorithm used, and adjust the encryption method in time. Article 39 A financial institution shall sign an e-banking service agreement or contract with its customers to clarify the rights and obligations of both parties. In the e-banking service agreement, financial institutions should fully reveal to customers the risks that may be faced when using e-banking, the risk control measures that financial institutions have taken and the risk control measures that customers should take, and the responsibilities for related risks. Article 40 Financial institutions shall take appropriate measures and adopt appropriate technologies to identify and verify the true and valid identities of customers who use electronic banking services, and effectively manage the operating authority, fund transfer or transaction limit of customers in accordance with relevant agreements signed with customers. Article 41 Financial institutions shall establish corresponding mechanisms to search, monitor and deal with activities of forging or deliberately setting telephone, website, short message number and other information similar to those of financial institutions to defraud customer information. Financial institutions shall report to the public security department and to the China Banking Regulatory Commission after discovering the illegal acts of counterfeiting electronic banks. At the same time, financial institutions should promptly remind customers on their websites, telephone voice prompt systems or short message platforms. Forty-second financial institutions should use a unified electronic banking service telephone number, domain name, SMS number, etc. And as far as possible in the agreement signed with customers, the legal way for customers to start e-banking business, the handling method of accidents and contact information should be clearly defined. Banking financial institutions that have realized centralized data processing shall conduct online banking business, and the head office (company) and its branches shall use unified domain names; When a banking financial institution that does not realize centralized data processing conducts online banking business, the head office (company) shall set up a unified access website and set up a link to the website of its branch in its home page. Forty-third financial institutions should establish an intrusion detection and protection system for electronic banks, monitor the operation of electronic banks in real time, regularly scan the loopholes in the electronic banking system, and establish a mechanism for identifying, handling and reporting illegal intrusions. Forty-fourth financial institutions to carry out electronic banking business, it is necessary to use electronic signature or electronic authentication for customer information and transaction information. , shall comply with the provisions of relevant national laws and regulations. When using the third-party authentication system, financial institutions should regularly evaluate the third-party authentication institutions to ensure that the relevant authentication is safe, reliable and credible. Article 45 Financial institutions shall regularly assess the adequacy of electronic banking resources available to customers, and take necessary measures to ensure smooth line access and provide electronic banking services to customers. Article 46 A financial institution shall formulate a business continuity plan for electronic banking to ensure the continuous and normal operation of electronic banking. The e-banking business continuity plan of financial institutions should fully consider the influence of third-party service providers on business continuity and take corresponding preventive measures. Article 47 Financial institutions shall formulate emergency plans and accident handling plans for electronic banking business, and regularly test these plans and plans to manage, control and reduce the harm caused by accidents. Forty-eighth financial institutions should regularly test the key equipment and systems of electronic banking, and record the test results in detail. Forty-ninth financial institutions should clarify the main authority, responsibilities and mutual supervision methods of electronic banking management and operation, and effectively isolate the risks between electronic banking application system, verification system, business processing system and database management system. Fiftieth financial institutions should establish and improve the internal audit system of electronic banking business, and audit the electronic banking business regularly. Article 51 Financial institutions shall adopt appropriate methods and techniques to record and properly preserve electronic banking business data, and the retention period of electronic banking business data shall meet the relevant requirements of laws and regulations. Fifty-second financial institutions should take appropriate measures to ensure that electronic banking business conforms to the provisions of relevant laws and regulations on customer information and privacy protection. Article 53 A financial institution shall, according to the actual situation of the development and management of electronic banking business, formulate a multi-level training plan to provide continuous training for the managers and business personnel of electronic banking business. /thread-624653- 1- 1 . html