Research On The Information Security Risk Elevation In X Commercial Bank

With the rapid development of information technology, the application of information technology in commercial banks is more and more widely. Information technology becomes the banking key capability to achieve business strategy and business goals. Also, it is the source of the innovation of new banking business. The role of information technology in bank has changed from supporting business to integrate with the business. Hence, banking industry is now highly dependent on information technology. Making information system secure, reliability and stability is must as it is relevant to the security of the entire bank, or even to the entire national financial system stability. X Bank as a wholly owned foreign corporate bank in China is in the localization process. How to build an effective information security risk assessment framework and control system security to prevent information leakage or security issue and handle the internal and external regulatory requirement like compliance requirement, is an increasingly highlighted problem.This theory is to analyze the existing information security risk assessment method and also study the China's requirement of information system security. It aims to give the proposal about how to improve the current information security risk assessment method by combining X Bank's actual situation and regulatory requirement. The new method is also showed in a real case study. Hopefully, the new method may enhance the control of X bank information security risk.