Guidelines for Information Technology Risk Management of Commercial Banks Chapter I General Provisions

Article 1 In order to strengthen the information technology risk management of commercial banks, these Guidelines are formulated in accordance with the Banking Supervision Law of the People's Republic of China, the Commercial Bank Law of People's Republic of China (PRC), the Regulations on the Administration of Chinese and Foreign Banks in People's Republic of China (PRC), the relevant requirements of national information security and relevant laws and regulations.

Article 2 These Guidelines shall apply to commercial banks established as legal persons within the territory of People's Republic of China (PRC).

Policy banks, rural cooperative banks, urban credit cooperatives, rural credit cooperatives, rural banks, loan companies, financial asset management companies, trust companies, finance companies, financial leasing companies, auto finance companies, money brokerage companies and other banking financial institutions shall refer to the implementation. ?

Article 3 The term "information technology" as mentioned in these Guidelines refers to the application of modern information technologies such as computers, communications, microelectronics and software engineering in the business processing, operation management and internal control of commercial banks, including information technology governance, establishment of a complete management organization structure, and formulation of sound management systems and processes.

Article 4 The information technology risks mentioned in these Guidelines refer to the operational risks, legal risks and reputation risks arising from natural factors, human factors, technical loopholes and management defects in the application of information technology by commercial banks.

Article 5 The goal of information technology risk management is to realize the identification, measurement, monitoring and control of information technology risks of commercial banks by establishing an effective mechanism, promote the safe, sustained and steady operation of commercial banks, promote business innovation, improve the application level of information technology, and enhance the core competitiveness and sustainable development ability.