Domestic Commercial Bank Information Technology Risk Management Research

Currently, information technology has become a basic platform for commercial bank to achieve the goal of management, operation, and innovation. With the the increasing level of financial information technology, commercial banks dependend more and more on information technology. The penetration of information technology to the financial business has accelerated the realization of operating efficiency and income of bank. one of the potential risks of information technology, however, is gradually widening at the same time. Especially in recent years, informationization risk event happens frequently in financial system. The loss of risk is also increasing. All these bring a growing threat to the healthy development of banks, so bank information technology risk management situation is becoming increasingly severe. Therefore,it is very crucial for commercial banks to prevent and control the risk of information technology. To create a safe and reliable financial IT platform that enables rapid development of healthy and stable banking business, it is important to promote the innovation of banking business, improve the application level of information technology, and strengthen the risk management of information technology simultaneouslyThis paper introduces the background and significance of the topic firstly. Then it discusses the definition and connotation of commercial bank information’ technology risk, the basic characteristics, category and management of China’s commercial banks information technology risks as well.Secondly, with the combination of theoretical research and case study, the study reveals the main risks in managing China’s commercial bank information technology and presents the current information technology risks that commercial banks need to focus on, including information technology governance, change management, business continuity management, the third party management and the risk management of important application system closely related to users as well. Simultaneously, the study finds out the causes of weakness of the information technology risk management in current financial system, including inadequate prevention of information technology risk, lack of co-ordinate arrangements and concern about the safety of information technology, deficiency of concepts, practical applications, technology platforms and other aspects of human resources in management of information technology.After that, the paper studies a case of one commercial bank information technology risk management. Based on its own characteristic, risk of information system and the process of Informatization, the study describes the composition characteristics of commercial bank information system. It analyzes the situation of bank information risk control and existing problems in detail, and puts forward an integrated manner to improve the risk management of the bank’s information technology, trying to provide the necessary information system security risk-based audit for the bank.Then, starting with the main performance of commercial bank information technology risks, based on the problems of commercial banks in the information technology risk management, the study provides the countermeasures to control, prevent and reduce the risk of bank information technology. On the basis of system construction, to perfect the management system, the study points out that, internal control and external control are to be applied. Internal control means enhancing their understanding, perfecting the internal control system, and strengthening team building and technical protection, the establishment of emergency system, etc.; external control mainly refers to strengthening financial supervision, speeding up technical regulations, strengthening risk control of service outsourcing and obtaining strong support of agencies and state, etc..Finally, the paper summarizes the research process and clarifies deficiencies of the study.