Study Of Information Security Risk Management System In Commercial Banks

With the development of China innovation and openness, China participaties the WTO, several main commercial banks are listed successfully, the development of globalization to banking industry in China is started up. IT, as the component of key competitiveness, becomes highly important and effective to the banks, in terms of launching business innovative, enhancing service quality and management level, reducing operational cost and participating into the global competition.With the development of informationization, commercial banks have been highly reliant on computer information system. Commercial bank's information security issue, which has been raised increasingly, have subsequently become a important factor affecting national security of finance. Hence, It has become indispensable parts of banking risk management in information era, in regard to strengthening research conduction on risk of banking information security, paying attention to risk control, prevention and resolution of banking information security, and enforcing risk management of banking information security. This article explores the risks and controlling strategies research of banking information security, hopefully, it could be contributed.In china, the homogenization level of commercial bank is relatively high, information security risk management system has universal application. The paper takes information security risk management system of commercial banks in China as the objective, by consulting the international and domestic relevant theories and literatures, analyzes the current status, deficiency and the reasons. Base on that, the paper points out the key issues of building and optimizing the information security risk management system of commercial banks, shows how to establish the information security risk concept, which include comprehensive arrangement, activating defense, strengthening risk control, optimizing resources allocation, and illustrates the way to balance the relationship between security and development, technology and management, comprehensive and intensive, independent and importation of foreign technology. The article concludes that banking risk management is a dynamic, comprehensive and complicated systematic project. The key action to build and optimize the information security risk management system include owning appropriate organizational structure, perfect institutional system, accurate risk identification and rational risk prevention, efficacious emergency response system, rigorous audit system. The paper has given the suggestions of some key conduction points.