Another national bank was fined.Financial Supervisory CommissionIt was announced today that Bank of Shanghai has failed to fully establish and implement internal control systems regarding the confidentiality of customer information and information security. The lack of verification of the case has violated Article 45-1, Paragraph 1 of the Banking Law and the “Financial Holding Company” stipulated in its authorization. According to the provisions of Article 3 and Article 8, Item 1, Item 2, Item 2 of the Implementation Measures for Internal Control and Audit Systems in the Banking Industry, therefore, a fine of RMB 10 million is imposed in accordance with Article 129, Paragraph 7 of the Banking Law.
The Financial Supervisory Commission conducts an inventory,Shanghai Commercial BankAmong the 65 branches, each branch has at least 100 customers, and the personal information of about 14,000 people in total, including names and ID card information, was leaked, that is, they were taken out of the country.
The Financial Supervisory Commission pointed out that in September 2011 and from May to July 2012, it received reports from the public about the bank’s information security issues. The results of the case review showed that the internal control system was not fully established and implemented, which caused customers The data was leaked and the relevant traces were not kept, so a fine was issued.
The Financial Supervisory Commission stated that Shanghai Commercial Bank’s deficiencies include:
(1) Failure to establish an internal control system:
1. Failure to formulate appropriate regulations for personal computer administrator rights: The bank did not clarify that it would change the password for personal computer administrator rights every six months until after the incident, and failed to change the password for a long time, resulting in the risk of leakage of customer information.
2. Failure to establish complete management regulations for portable devices: Personnel who have the right to use portable devices may use portable devices to carry out data within the industry, and there are no appropriate access control measures, which is detrimental to information security protection.
(2) Failure to implement the internal control system:
1. The case reporting system does not follow internal regulations to record the use of personal data and retain track data or relevant evidence, which is not conducive to tracking the use of personal data when personal data is leaked, and affects the audit process.
2. The bank failed to implement internal regulations and failed to test the investment security monitoring before the operating system went online and when it was updated.softwareVulnerability, and confirmed its execution on the workstation, so that the software was not found to be unable to start normally, resulting in the inability to control and record the access of portable device data, affecting the timeliness of the audit, and making it impossible to determine the actual damage. and is not conducive to subsequent investigation procedures.
The Financial Supervisory Commission also stated that it has required Shanghai Commercial Bank to conduct follow-up investigations and accountability, including:
1. Comprehensively review the responsibilities of the responsible personnel and supervisors involved in this case, and the degree of punishment should be commensurate with their responsibilities.
2. The bank is required to take stock of whether various computer systems involving personal data in the bank have established audit trails for retaining personal data, and to check whether the permissions of all bank employees to inquire about personal data comply with the principle of minimal permissions, and review them regularly. Permissions job.
3. The bank is requested to establish a testing and auditing mechanism for various application systems and a monitoring and analysis mechanism for abnormal query and download situations within the scope of authority.
4. The bank is requested to enhance the information system audit capabilities of auditors and entrust accountants to conduct bank-wide personal data protection project audits.
14,000 customer personal information was leaked, the Financial Regulatory Commission fined Shanghai Commercial Bank 10 million yuan
Another national bank was fined. The Financial Supervisory Commission announced today that the Bank of Shanghai failed to fully establish and implement internal control systems regarding the confidentiality of customer information and information security. The lack of verification in the case violated…
Starting from 2013, the number of independent director seats in 348 listed companies will be significantly adjusted.
According to the latest statistics from the Securities and Futures Bureau of the Financial Supervisory Commission, in terms of independent director seats, a total of 348 companies must start major adjustments from 113 to 116, and 69 will need to be adjusted next year…
MegaGold expands shareholding trust and nearly 3,000 employees will receive a salary increase of NT$12,000 next year
In order to enhance the cohesion of the group’s employees, after being the first to announce that the board of directors approved a 4.5% salary increase for the group, the board of directors of Mega Financial Holdings (2886) today approved the expansion of the implementation of “employee stock ownership trust…
So envious! Mega Financial Holdings’ Board of Directors Approved the Group’s “Employee Stock Ownership Trust”
In order to enhance the cohesion of the group’s employees, after being the first to announce that the board of directors approved a 4.5% salary increase for the group, the board of directors of Mega Financial Holdings today approved the expansion of the implementation of “employee stock ownership trusts” to the group’s subsidiaries…
Zhongzhi Group’s insolvency and debt relief shocked Taiwan’s financial industry, with no exposure at all
The insolvency of Zhongzhi Group has once again attracted the attention of the outside world on the financial industry’s exposure to mainland China. In response, Tong Zhengzhang, deputy director of the Banking Bureau, responded that in addition to the financial industry’s total exposure to Zhongzhi Group being zero, the financial regulatory…
Kanghe Securities won the “Happy Enterprise Gold Award” for the second time and is definitely moving towards innovative green finance.
Kanghe Securities (6016) won the 2023 1111 Human Resources Banking Financial Management Category “Lucky Enterprise Gold Award” for the second time, representing its good and complete salary and benefits, vacation system,…
common 0 then leave a message
- When posting articles or placing tags, you must not make any remarks that are illegal or infringe upon the rights of others. Violators shall bear legal responsibility.
- For comments that are knowingly untrue or excessively emotional and abusive, if reported by netizens or discovered by this website, Lianhe News Network has the right to delete the article, suspend or terminate the membership. If you do not agree with the above rules, please do not post articles.
- For tags that are meaningless, irrelevant to this article, knowingly untrue, or abusive, Lianhe News Network reserves the right to delete tags, suspend or cancel membership. If you do not agree with the above regulations, please do not place tags.
- If the “nickname” involves swearing, swearing, or infringing on the rights of others, United News Network has the right to delete the article, suspend or cancel the membership. If you do not agree with the above rules, please do not post articles.
2023-11-28 08:17:48
#customer #personal #information #leaked #financial #regulator #fined #Shanghai #Commercial #Bank #million #yuan #Lianhe #News #Network
