JR/T 0290-2024
Financial Industry Open Source Software Application Management Guide (English Version)
- Standard No.
- JR/T 0290-2024
- Language
- Chinese, Available in English version
- Release Date
- 2024
- Published By
- Professional Standard - Finance
- Latest
- JR/T 0290-2024
- Introduction
-
Standard Name: Guidelines for the Management of Open Source Software Applications in the Financial Industry
Standard Number: JR/T 0290-2024
Scope: This document provides comprehensive management guidelines for financial institutions in the application of open source software. It offers guidance on organizational structures, management regulations, lifecycle process management, risk management, inventory management, and tool-based management. It is applicable to financial institutions for standardizing the process of introducing, using, and retiring open source software, as well as for risk control.
Introduction: Open source software, compared to traditional closed-source software, has more external influencing factors in terms of technical security and operation and maintenance, which may lead to security and compliance issues. Therefore, financial institutions should implement systematic and unified management of open source software to enhance application efficiency and reduce potential risks. This document aims to propose corresponding full-process management methods based on the characteristics of open source software, to improve the management capabilities of financial institutions and control the risks associated with open source software applications. It can serve as a reference standard for financial institutions in managing open source software applications and as a reference for industry regulatory authorities.
Normative References: The content of the following documents is indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition (including any amendments) applies. Key references include GB/T 28458-2020, GB/T 30276-2020, GB/T 30279-2020, JR/T 0289-2024, and JR/T 0291-2024.
Management Framework: The open source software management framework includes six components: organizational structures, management regulations, lifecycle process management, risk management, inventory management, and tool-based management. It covers two institutional elements and three technical management processes, and it is recommended to configure one management tool. Financial institutions can conduct self-assessments of maturity in the following three aspects to continuously improve overall technical management capabilities: institutional level, process level, and tool level.
JR/T 0290-2024 history
- 2024 JR/T 0290-2024 Financial Industry Open Source Software Application Management Guide
