ISO/TR 13569-2005
金融服务.信息安全指南

Financial services - Information security guidelines

ISO/TR 13569-2005 发布历史

This Technical Report provides guidelines on the development of an information security programme for institutions in the financial services industry. It includes discussion of the policies, organization and the structural, legal and regulatory components of such a programme. Considerations for the selection and implementation of security controls, and the elements required to manage information security risk within a modern financial services institution are discussed. Recommendations are given that are based on consideration of the institutions' business environment, practices and procedures. Included in this guidance is a discussion of legal and regulatory compliance issues, which should be considered in the design and implementation of the programme.

ISO/TR 13569-2005由国际标准化组织 IX-ISO 发布于 2005-11。

ISO/TR 13569-2005 在中国标准分类中归属于: A11 金融、保险，在国际标准分类中归属于: 03.060 金融、银行、货币体系、保险。

ISO/TR 13569-2005的历代版本如下：

• 1996年11月 ISO/TR 13569-1996 银行业务、证券和其他金融服务.信息安全使用导则
• 1997年10月 ISO/TR 13569-1997 银行业务和相关金融服务 信息安全指南
• 1998年12月20日 ISO/TR 13569-1997/Amd 1-1998 银行和相关金融服务.信息安全指南.修改件1
• 2005年11月 ISO/TR 13569-2005 金融服务.信息安全指南

ISO/TR 13569-2005 金融服务.信息安全指南 由 ISO/TR 13569-1997 变更而来。

ISO/TR 13569-2005 金融服务.信息安全指南 由 ISO/TR 13569 AMD 1-1998 变更而来。

标准号

ISO/TR 13569-2005

发布日期

2005年11月

实施日期

废止日期

无

中国标准分类号

A11

国际标准分类号

03.060

发布单位

国际标准化组织

被代替标准

ISO/TR 13569-1997 ISO/TR 13569 AMD 1-1998

适用范围

This Technical Report provides guidelines on the development of an information security programme for institutions in the financial services industry. It includes discussion of the policies, organization and the structural, legal and regulatory components of such a programme. Considerations for the selection and implementation of security controls, and the elements required to manage information security risk within a modern financial services institution are discussed. Recommendations are given that are based on consideration of the institutions' business environment, practices and procedures. Included in this guidance is a discussion of legal and regulatory compliance issues, which should be considered in the design and implementation of the programme.