【英文标准名称】:Financialservices-Privacyimpactassessment
【原文标准名称】:金融业务.隐私影响评估
【标准号】:ISO22307-2008
【标准状态】:现行
【国别】:国际
【发布日期】:2008-05
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/TC68
【标准类型】:()
【标准水平】:()
【中文主题词】:估计可靠性;评估;价值评估;银行业务;兼容性;机密性;数据采集;数据分析;数据收集;数据交换;数据保护;数据记录;数据安全;数据存储;定义;金融机关;金融机构;金融业务;信息;个人的;资料保护;危险
【英文主题词】:Assessedreliability;Assessment;Assessmentofvalue;Bankoperations;Compatibility;Confidentiality;Dataacquisition;Dataanalysis;Datacollection;Dataexchange;Dataprotection;Datarecording;Datasecurity;Datastorage;Definitions;Evaluations;Financialinstitutions;Financialservices;Information;Privat;Risk
【摘要】:ThisInternationalStandardrecognizesthataprivacyimpactassessment(PIA)isanimportantfinancialservicesandbankingmanagementtooltobeusedwithinanorganization,orby“contracted”thirdparties,toidentifyandmitigateprivacyissuesandrisksassociatedwithprocessingconsumerdatausingautomated,networkedinformationsystems.ThisInternationalStandard-describestheprivacyimpactassessmentactivityingeneral,-definesthecommonandrequiredcomponentsofaprivacyimpactassessment,regardlessofbusinesssystemsaffectingfinancialinstitutions,and-providesinformativeguidancetoeducatethereaderonprivacyimpactassessments.Aprivacycomplianceauditdiffersfromaprivacyimpactassessmentinthatthecomplianceauditdeterminesaninstitution’scurrentlevelofcompliancewiththelawandidentifiesstepstoavoidfuturenon-compliancewiththelaw.Whiletherearesimilaritiesbetweenprivacyimpactassessmentsandprivacycomplianceauditsinthattheyusesomeofthesameskillsandthattheyaretoolsusedtoavoidbreachesofprivacy,theprimaryconcernofacomplianceauditissimplytomeettherequirementsofthelaw,whereasaprivacyimpactassessmentisintendedtoinvestigatefurtherinordertoidentifywaystosafeguardprivacyoptimally.ThisInternationalStandardrecognizesthatthechoicesoffinancialandbankingsystemdevelopmentandriskmanagementproceduresarebusinessdecisionsand,assuch,thebusinessdecisionmakersneedtobeinformedinordertobeabletomakeinformeddecisionsfortheirfinancialinstitutions.ThisInternationalStandardprovidesaprivacyimpactassessmentstructure(commonPIAcomponents,definitionsandinformativeannexes)forinstitutionshandlingfinancialinformationthatwishtouseaprivacyimpactassessmentasatooltoplanfor,andmanage,privacyissueswithinbusinesssystemsthattheyconsidertobevulnerable.
【中国标准分类号】:A11
【国际标准分类号】:03_060
【页数】:28P.;A4
【正文语种】:英语