审查基于移动终端的金融服务安全访问的考虑因素和CIO、CISO和CTO的风险处理策略
Review of Considerations for Mobile Device based Secure Access to Financial Services and Risk Handling Strategy for CIOs, CISOs and CTOs
摘要：
金融服务组织中的信息技术和安全利益相关者（如CIO、CISO和CTO）经常被要求识别他们支持的金融服务的移动计算渠道的风险。他们还被要求提出处理风险的方法，确定风险接受水平并减轻风险。这就要求他们制定策略，以支持来自不同供应商、具有不同操作系统和硬件平台的各种移动设备，同时保持在可接受的风险水平内。应在信息安全政策文件或银行、支付服务提供商等金融服务组织的其他适当文件中记录这些表述。虽然风险和缓解方法可从多个来源获得，但高级利益相关方可能会发现，以全面的方式表述问题并与企业所有者和其他技术利益相关方分享是一项挑战。本文回顾了目前的研究，解决上述问题，并阐明了一个战略，高级利益相关者可能会使用在他们的组织。假设高级利益相关者的这种类型的综合战略指南不容易获得，CIO，CISO和CTO会发现本文非常有用。
英文摘要：
The information technology and security stakeholders like CIOs, CISOs and CTOs in financial services organization are often asked to identify the risks with mobile computing channel for financial services that they support. They are also asked to come up with approaches for handling risks, define risk acceptance level and mitigate them. This requires them to articulate strategy for supporting a huge variety of mobile devices from various vendors with different operating systems and hardware platforms and at the same time stay within the accepted risk level. These articulations should be captured in information security policy document or other suitable document of financial services organization like banks, payment service provider, etc. While risks and mitigation approaches are available from multiple sources, the senior stakeholders may find it challenging to articulate the issues in a comprehensive manner for sharing with business owners and other technology stakeholders. This paper reviews the current research that addresses the issues mentioned above and articulates a strategy that the senior stakeholders may use in their organization. It is assumed that this type of comprehensive strategy guide for senior stakeholders is not readily available and CIOs, CISOs and CTOs would find this paper to be very useful.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
