-201/S
An ninh mang va bao dam an ninh thong tin ngan hang
' -. Phan Thai Diing, Phd Cue tii/dng Cue ZmW - Ngan hang Nha nUdc Viet Nam
Trong boi canh, tinh hinh an ninh thong tin va an toan thong tin mang dang c6 nhieu dien bien phtTc tap tren pham vi toan c k , tac dong, anh hifdng trtfc ti^p den hoat dpng tai chinh, ngan hang, cu the la: (i).
Ma dgc do toi pham mang phat tan vao cac he thong cCfa hang ban le, ban hang online nhSm an cap thong tin khach hang ngay cang tinh vi, d i thich nghi va kho phat hien; (li). Xuat hien nhieu virus, phan m i m gian diep d i dang qua mat cac chuong trinh diet virus khi tan cong vao he thong mang tai chinh ngan hang; (iii). Cac to chirc toi pham mang va hacker tang cudng phat tri^n, trao doi p h k mem doc hai nhIm vao finh vi/c ngan hang; mua ban thong tin tai khoan ngan hang trong cac dien dan hacker bi mat nhim true lai kinh te; (iv). Toi pham mang tan cong may ATM de an cap tien va thong tin the; (v). Xuat hien ngay cang nhieu cuoc t^n cong mang muc dich chinh trj vao he thong tai chinh, ngan hang khi xay ra cang thing giOa cac nudc, cac vung lanh tho,...
Tai Viet Nam, thdi gian qua tinh hinh an ninh thdng tin cung didn bien rat phUc tap, tdi pham cdng nghe eao (trong nUdc va qudc td) gia tang nhilu hinh thUc tin cdng nguy hiem vao cac ha tang thdng tin trpng yeu cua qudc gia va cae Unh vuc kinh t l quan trong. Hoat ddng ngSn hang tgi Vi?t Nam dang ndi len cac vin d l ve an ninh thdng tin sau (theo tin tU Bd Cdng an): (i). Viet Nam nlm trong nhdm 10 nUdc cd ty le gia tang lUa dao true tuyen cao nhit the gidi; (ii). Xuat hien mdt sd dudng diy mua ban, sir dung trai phep thdng tin the tin dung ciia ngudi nudc ngoai de mua hang online, thanh toan true tijyin tai Viet Nam; (iii). He thdng may ATM ciia cac ngan hang trd thanh muc tieu tin cdng eiia tdi pham cdng nghe eao ngUdi nudc ngoai nham an d p thdng tin the ATM cLia khach hang, tao the gia dd rut tien; (iv).
Tdi pham Ipi dung he thdng thanh toan tide tuyen de riia tien hoac ca do, danh bac cd td chUc vdi quy md Icm qua mang Internet.
Trong bdi canh dd cdng tac bao dam an ninh thong tin dUdc nganh Ngan hang quan tam, chil trong v l mpi mat: con ngudi. cdng nghe va chinh sach:
1. Tang cudng co sA phap ly bao dam an ninh cong nghe thong tin ngan hang Cimg vdi viec phat tnen va diy manh Ung dung cdng nghe thdng tin trong hoat ddng ngan hang, trong thdi gian qua Ngan hang Nha nudc (NHNN) tang cUdng cdng tac xay dung, ban hanh cac van ban phap quy, tao
CO sd phap ly kha hoan ehinh eho hoat ddng Ung dung CNTT ngan hang ndi chung va cdng tac dam bao an ninh CNTT ngan hang ndi rieng nhU: Quyet dmh sd 35/2006/QD- NHNN ngay 31/7/2006 quy dmh nguyen tic quan ly riii ro ti'ong hoat ddng ngan hang dien tLf; Quyet dmh sd 29/2008/QD-NHNN ngay 13/10/2008 quy djnh bao M\ he thdng trang thilt bj tin hpc trong nganh Ngan hang; Thdng tu sd 01/2011/rT-NHNN ngay 21/2/2011 quy dmh dam bao an toan, bao mat he thdng cdng nghe thdng tin trong hoat ddng ngan hang; Thdng tu 29/2011/n-NHNN ngay 21/9/2011 quy dmh an toan, bao mat trong cung d p djch vu ngan hang tren Internet; Thdng tu 36/2012/n^HNN ngay 28/12/2012 quy
dmh ve trang bi, quan ly, van hanh va dam bao an toan hoat ddng ciia may giao dich tU dong; Xay dUng Thdng tU quy dmh cac yeu cau ky thuat ddi vdi trang thiet bi phuc vu hoat ddng thanh toan the va an toan bao mat trong thanh toan the..,.
TrUdc cac diln bien phUc tap ciia tinh hinh mit an toan ha tang CNTT, nam 2014 NHNN ban hanh cac van ban chi dao, canh bao sdm, hudng din cac NHTM kip thdi tang cudng cac bien phap ATBM he ttidng CNTT.
De tang cUdng an nmh He thdng thdng tin ngan hang, ngay 25/7/2014, Thdng ddc NHNN da ban hanh Chi thi 01/CT-NHNN m v l tang cudng cdng tac bao dam an nmh va an toan thdng tin mang trong tinh hinh mdi.
Chi thi yeu clu cac NHTM, va cac ddn vi
TAP CHI TIN HOC NGAN HANG • SO 1(149) - 2/2015 • 1 1
~-2, 'Auc
trung gian thanh toan ra soat, ciing cd ha t i n g CNTT de phdng ngUa cac rui ro do cac tan cdng mang gay nen; chiJ dpng triln khai cac giai phap tdng the dam bao ANTT va hoat ddng lien tuc cua cac he thdng thdng tin quan trong, nhit la cae he thdng cung d p dich vu cho khach hang va cac he thdng chUa dU lieu quan trong ciia ngan hang va khach hang.
Tich cue va chu ddng phdng ngUa riii ro an ninh thdng tin, cac NHTM ban hanh quy che an toan, bao mat cho he thdng CNTT. Cac quy che nay cd ban da phu hpp vdi he thdng CNTT, CO c l u td chUc, yeu c l u quan ly va hoat ddng nghiep vu cua don vi. Cac ndi dung, pham vi dilu chinh ciia quy che ATBM dap ifng yeu c l u theo quy dmh cua Chi tiii 01/CT-NHNN.m. Ngoai quy che ATBM, cac ddn V! ban hanh nhieu quy dinh, quy trinh, hudng dan khac cd hen quan viec diu tu mua sam trang bi, quan tn, van hanh va khai thac he thdng CNH.
2. Quan tam d u tu, nang c^p ha t^ng hy thuat ninh mang va tri^n khai nhi^u giai phap dam bao an ninh fliong tin ngan hang
Cae he thdng thdng tin quan trpng cua NHNN, cung nhU cua cac TCTD ddu dupe trang bi he thdng ANBM. Trong thdi gian qua, toan Nganh day manh diu tU, nang d p Trung tam dU lieu, lip dat va sCf dung cac thiet bi, giai phap bao mat hen tien de kilm soat truy cap, chdng t i n cdng, phat hien xam nhap trai phep vao he thdng CNTT, dd tim phat hien diem yeu. Id hdng an ninh bao mat. Cac Ung dung cung d p dich vu ra ben ngoai diu dUoc ap dung cac giai phap kiem soat buy nhap va ma hda dii lieu. Cdng tac lUu trd va du phdng vd dU lieu va may chii dUdc Cling cd, tang cudng. Mdt sd ddn vi cdn SLf dung mdt sd giai phap an nmh bao mat khac de theo ddi giam sat dudng truyin thdng, tiang v^ieb, giam sat thu dien \\l, phdng chdng thu rac, xac thuc ngudi diing giao dich internet banking,... Ngoai ra, cac quy dmh, bien phap ve d p phat, quan ly va sii dung tai khoan truy cap, tai khoan dac quyln cung dUdc chii trong, dam bao an nmh trong van hanh ha tang CNTT.NHNN thudng xuyen theo ddi, cap nhat tinh hinh an nmh mang trong nudc va qudc te de canh bao cac ddn vi trong nganh kjp thdi
phdng chdng, xij' ly cac riii ro. Id hong bao mat kip thdi, vi du nhU: Id hdng bao mat OpenSSL; ATM SLf dung he dilu hanh Windows XP; rui ro t i n cdng mang vao he thdng website, Internet Banking...
Tang cUdng cdng tac kiem tra, kiem toan hoat ddng CNH, tai cac NHTM thanh lap bd phan kiem soat, kiem toan ndi bd CNTT chuyen trach, cd chUc nang xay dung ke hoach va thuc hien kiem toan hang nam viec tuan thii cae quy dinh ndi bd ddi vdi hoat ddng CNTT. Ngoai ra, cac don v; ciing thue cdng ty kiem toan ddc lap thuc hien kiem toan cd ndi dung v l hoat ddng CNTT Nhifng tdn tai, han che va khuyen nghj trong bao cao kiem toan da dUPc cac ddn vi thuc hien khac phuc.
Tnen khai cac bien phap tang cUdng bao ve cac dia diem lip dat thiet bi CNTT quan trong, Trung tam dif lieu, cac td chUc tin dung da ra soat lai t i t cac chmh sach v l ANBM, cae tai khoan dac quyen, cac gial phap xiJ ly va img cUu su cd, khac phuc xi^
ly cae diem yeu. Id hdng, tat ca cac truy cap vao viing may chu dUde kilm soat chat ehe, han che cac truy cap tU xa, neu cd thi dUde xac thUc qua VPN hoac xac thUc 2 thanh to;
cd kich ban xif ly sU cd di kem vdi tiing he thdng. De dam bao hoat ddng lien tuc ciia he tiidng thdng tin, nghiep vu cho Trung tam dU lieu. Cac don vi da thuc hien sao luu dif lieu quan trong hang ngay, hang tuin ddng thdi kiem tra kha nang sao luu, phuc hdi dU lieu, dua ra nhii'ng kjch ban xif ly cac tinh hudng sU cd cd the xay ra.
3. An ninh thong tin ngan hang - Mot s5 kho khan
Do ngudn kmh phi diu tu cho ha ting CNTT r i t Idn, tiong dieu kien kmh te khd khan, nhilu td chUc tin dung dang trong tien trinh sap nhap, hoac tai co d u , . . . anh hudng den k l hoach phat tiien chung va ke hoach phat tndn ha t i n g CNTT cua tUng NHTM, ngudn luc danh cho hoat ddng CNTT bi thu hep, ke hoaeh dam bao hoat ddng lien tpc mdi chi dupe trien khai cho mdt sd he thdng thdng tin trong yeu, anh hudng khdng nhd den cdng tac dam bao an toan thdng tin ciia cac ngan hang. Lfng cUu sU cd an nmh CNTT trong nganh Ngan hang ndi chung va cua mdi don vi ndi rieng van cdn mdt sd han che.
tdn tai: nhieu don vi chua cd bd phan an ninh thdng tin chuyen traeh, ehua xay duhg kich ban va qui ti'inh phan ifng cu the ti-Ude cac su cd an nmh CNTT ti'ong ddn vj; Chua cd bo phan dieu phdi Ung ctai su ed ANTT trong toan Nganh.
De tang cudng cdng tac bao dam ANTT trong toan nganh Ngan hang va trien khai tdt Chi thi 01/CT-NHNN.m, cac NHTM cin:
Xay dung va ti'ien khai chien lUdc dam bao an toan thdng tin trong chien lupc tdng the phat trien CNTT ciJa minh, dUa ra bien phap hiStJ hieu phdng, chdng tdi pham cdng nghe cao t i n cdng he thdng ng§n hang; Xay dUng va ap dung tieu chuan, chinh sach an ninh bao mat, duy tri hoat dpng hen tuc an toan, dn dmh ha ting CNTT; Tang cUdng chia se, trao ddi thdng tin, kmh nghi§m lien quar trong qua trinh XLf ly sU cd an nmh CNTT de chdng tai diln hoae giam nhe thiet hai va tao dilu kien khac phue nhanh sU cd tUPng tif sau nay.
Trong bdi d n h tinh hinh thd gidi didn bien phUc tap nhu hien nay, nguy cd tif cac cuoc chien tranh thdng tin, ehien tranh mang giSa cac qudc gia dang hien hOu, tdi pham cong nghe cao t i n cdng vao ha ting CNTT noi chung dac biet la he thdng mang tai chinh • ngan hang ngay cang dien bien phUe tap vifi nhilu hinh thUc tan cdng tinh vJ va cudng do ngay cang tang Do do, d l giam thilu thiet hai do rui ro tU cac cudc tan cdng mang cua toi pham cdng nghe cao gay ra, cac td chifc tai chinh ngan hang cin tang cUdng nhiej ngudn luc cho cdng tac bao dam an ninti thdng tin,
De dam bao an ninh he thdng ha ting ky thuat CNTT va cac he thdng thdng tin ngan hang, trong nam 2015, Cue CNTH setang cudng phdi hpp vdi cae don vi CNTT tiong toan Nganh tiep tuc tham mUu cho lanh dao NHNN va cac TCTD td chUc thUe hien ddng bp cac giai phap sau dSy. Day manh cong tac truyen thdng, dao tao nh§n thUc v l an toan thdng tin; Xay dung, ra soat cac quy dmh, quy trinh, ehinh sach; Tang cUdng cdng tac kiem tia viec thuc hien quy ti'inh, chinh sach; Xay dung cac giai phap hanh chinh va diu tu phat tnen ky thuat; triln khai xay dung mang lUdi ifng cUu sU cd ANTT nganh Ngan hang •
1 2 « TAPCHITINHOCNGANHANG • SO 1(149) - 2/2015
