| The continuous deepening of information technology has accelerated the efficient development of financial technology and brought new development opportunities to the intelligentization of commercial banking business.In the process of banking business,there are a large number of capital flows and users’ sensitive data sharing,which have brought unprecedented challenges to information security risk management.Once a serious security incident occurs,it will directly endanger users’ property or personal sensitive privacy data,and even affect people’s livelihood and people’s livelihood.In recent years,the frequency of network security incidents of key information systems in the banking industry has been on the rise,and the research on information security risk assessment of commercial bank information systems has practical significance.This paper takes the information security risk of CZ Bank’s small and micro loan system as the research object,constructs a model based on the combination of analytic hierarchy process and fuzzy comprehensive evaluation method,and combines the Delphi method and the questionnaire method to establish the information security risk evaluation system of the system.,and conduct risk assessment on the information security risks of CZ Bank’s small and micro loans.This paper establishes a hierarchical system of information security risk factors of CZ Bank information system,that is,the criterion layer is physical security,data security,operation security,and management security,and the scheme layer is computer room environment security,equipment security,communication line security,and storage.Media security,authentication and authentication,access control,data encryption,non-repudiation and auditing,system disaster recovery backup,malware protection,network attack protection,human resource management,information security system,information security training,etc.14 items.The index system is obtained through the combination of literature retrieval and expert judgment,and it is scientific and reasonable.This paper proves that the analytic hierarchy process combined with the fuzzy comprehensive evaluation method model has applicability in the information security risk assessment scenario of CZ Bank’s small and micro loan system.The risk assessment index system is constructed and weighted by the analytic hierarchy process,and the assessed object is comprehensively assessed by the fuzzy comprehensive assessment method,which solves the transformation from the fuzzy qualitative results to the scientific quantitative results in the risk assessment process of the small and micro loan system..Practice has proved that this model can be applied in the evaluation process of CZ Bank’s small and micro loans,so it can be extended to other similar information security risk assessment scenarios.Through the research on the information security risk management of CZ Bank’s small and micro loan system,this paper demonstrates the feasibility and universality of the analytic hierarchy process combined with the fuzzy comprehensive evaluation method model,which can provide experience for the information security risk management of similar information systems in commercial banks.and reference. |
