Planning And Construction Of Information Security In Financial Agencies

With the development of science and technology, financial industry has become the biggest beneficiary of the rapid development of information industry. Products, services, management and risk rely more and more upon computers and networks. With the emergence and innovation of various financial products, financial service and products have brought great profits for financial agencies; however, there are also high security risks. What are transported and stored in the information system of financial institutions are normally the most important data with highest confidential level. Once the financial system is attacked or breaks down, the consequence could be disastrous, even causing national economical paralysis and international crisis.Although big domestic and foreign agencies have paid great heed to security and reaction speed of information system and attempted to enhance the system by using various technical and management measures, they nevertheless take less notice on the prevention and control of security problems during the early phase of network construction. Moreover, financial agencies lack professionals and effective regulative standards, especially with regard to handling the emergencies of the system; they are unable to respond in time with effective methods and have to make up afterwards rather than prevent the disaster beforehand.This thesis analyzes the importance, necessity and significance of information system security structure in financial industry with regard to its present status and trend.It introduces basic theories and practices in respect of the prevention, detection, control, reaction, management and assessment in the security of information system. It then analyzes in depth the status of China’s financial industry and shows the weakness and potential risks in its basic network architecture and backup system.In view of the problems of information security in financial industry, the solution this thesis proposes is "planning and construction of information security in financial agencies". It integrates various technologies for network security, including those for basic network, server storage architecture and backup system. The thesis proposes the idea of the construction of a unified LAN, which can enhance the ability of security control in financial enterprises.