【正文】
對(duì)所有獲取保密數(shù)據(jù)的行為都須記入日志,并且盡力確保這些日志不被篡改。 銀行的保密數(shù)據(jù),在通過(guò)公共、私人或內(nèi)部網(wǎng)絡(luò)傳輸過(guò)程中,應(yīng)確保其安全,避免被未經(jīng)授權(quán)者偷看或修改。此外,銀行越來(lái)越多的使用服務(wù)供應(yīng)商,也增加了銀行關(guān)鍵數(shù)據(jù)泄密的可能性。保密措施應(yīng)該與傳輸和 /或數(shù)據(jù)庫(kù)中所儲(chǔ)存信息的敏感性相適應(yīng)。 應(yīng)該擁有包括監(jiān)控和修改步驟在內(nèi)的足夠修改控制政策,以避免電子銀行系統(tǒng)受到任何可能損害其控制措施或數(shù)據(jù)可靠性的有意或無(wú)意的修改。 電子銀行業(yè)務(wù)記錄的儲(chǔ)存、進(jìn)入和修改,要確保數(shù)據(jù)被篡改的可能性極小。因此,銀行應(yīng)該確保擁有適當(dāng)?shù)拇胧?,保證通過(guò)互聯(lián)網(wǎng)傳輸?shù)?、?chǔ)存于銀行內(nèi)部數(shù)據(jù)庫(kù)或通過(guò)代表銀行提供服務(wù)的第三方傳輸 /儲(chǔ)存的電子銀行交易、記錄和信息等數(shù)據(jù)的準(zhǔn)確性、完整性和可靠性。如果不能維持交易、記錄 和信息等數(shù)據(jù)的完整性,銀行就可能蒙受經(jīng)濟(jì)損失或承受重大法律和聲譽(yù)風(fēng)險(xiǎn)。如果不能進(jìn)行足夠的授權(quán)控制,某些個(gè)人就可能會(huì)修改他們的權(quán)限,規(guī)避職責(zé)分解和進(jìn)入未經(jīng)特許授權(quán)的電子銀行系統(tǒng)、數(shù)據(jù)庫(kù)或應(yīng)用程序。 因此,需要對(duì)傳統(tǒng)的職責(zé)分解控制措施作重新檢查和修改,確保其維持合適 的控制水平。職責(zé)分解可以確保數(shù)據(jù)的準(zhǔn)確性和完整性,也可以用于防止個(gè)人欺詐行為。 cessible by duly authorised and authenticated individuals, agents or systems. 外文 翻譯 外文資料 The Basel Committee on Banking Supervision:《 Risk Management Principles for Electronic Banking》 ( part) : Principle 6: Banks should ensure that appropriate measures are in place to promote adequate segregation of duties within ebanking systems, databases and applications. Segregation of duties is a basic internal control measure designed to reduce the risk of fraud in operational processes and systems and ensure that transactions and pany assets are properly authorised, recorded and safeguarded. Segregation of duties is critical to ensuring the accuracy and integrity of data and is used to prevent the perpetration of fraud by an individual. If duties are adequately s