Strengthening the security of information systems serving securities trading activities

The State Securities Commission requires securities companies, fund management companies, and fund certificate distribution agents to strengthen the work of ensuring the security of information systems serving securities trading activities.

To ensure the safe, stable and smooth operation of the stock market and to strengthen the work of ensuring the safety and security of the information technology system serving online securities trading activities, the State Securities Commission has sent documents to Securities Companies, Fund Management Companies, and Fund Certificate Distribution Agents.

The State Securities Commission recommends that companies continue to implement the above documents and strengthen the work of ensuring the security of information systems serving online trading activities.

Firstly, strengthen the inspection, supervision and evaluation of information systems serving market transactions, and detect and provide early warning of information security risks.

Second, develop and deploy a plan to respond to and troubleshoot information system security incidents and emergency situations for online trading systems.

Third, require companies to proactively and periodically implement offline data backup solutions; Deploy solutions to be ready to quickly restore information system operations when problems occur; Store data access logs, regularly review to promptly detect illegal access to the information systems of companies; Strengthen the work of ensuring data security, especially personal data; update and patch devices, operating systems, software (prioritize removing end-of-life software; Use tools such as vulnerability scanners to perform periodic scanning,...).

Fourth, companies must ensure compliance with regulations on information system security by level, regulations on the responsibilities of information system owners (according to Articles 19 and 20 of Decree No. 85/2016/ND-CP dated July 1, 2016 of the Government on ensuring information system security by level; Articles 9 and 10 of Circular No. 12/2022/TT-BTTTT dated August 12, 2022 detailing and guiding a number of Articles of Decree No. 85/2016/ND-CP and National Standard TCVN 11930:2017 on information technology - security techniques - basic requirements for information system security by level).

Fifth, comply with current legal standards and regulations on personal data protection, network information security and network security.

Source: https://baodautu.vn/tang-cuong-bao-dam-an-toan-he-thong-thong-tin-phuc-vu-hoat-dong-giao-dich-chung-khoan-d388724.html