What fields should the information security strategy of commercial banks involve?

(1) security policy;

(2) Construction of internal control system;

(3) Risk management status.

(4) system security;

(5) Business continuity plan;

(6) Emergency plans for business operations;

(7) Risk early warning system;

(eight) the management of other important security links and mechanisms.

Technical aspects to be considered:

(1) personal safety;

(2) data communication security;

(3) application system security;

(4) Key management;

(5) Authentication and confidentiality of customer information;

(6) Intrusion monitoring mechanism and report response mechanism.