Details of the Inquiry
I would like to turn an idea for a fintech business into a system.
What information security requirements must be considered when developing a fintech system?
Because we are a startup, are there guidelines for companies that find it difficult to obtain professional opinions such as consulting?
If there are cases from other companies, introducing some of them would be a great help.
A representative fintech service is the open banking initiative currently underway in the financial sector.
Fintech businesses, including open banking services, necessarily involve electronic financial transactions, so they must comply with the Electronic Financial Supervision Regulations under the Electronic Financial Transactions Act.
In addition, as financial services that use open APIs have been actively introduced, financial authorities are working to block technical security risks, including by publishing related guidelines.
(1) Review the guidelines or standards of representative financial security authorities such as the Financial Supervisory Service and the Financial Security Institute
(2) Inquire by phone or email, referring to the organization chart and contact details of those institutions
There is a security assessment guide to consult when building a fintech system.
Fintech is divided into the fintech service website/app, the user institution (for example, a bank), and the Korea Financial Telecommunications and Clearings Institute system.
For the websites and smartphone apps that provide fintech services, the Financial Security Institute has published security assessment criteria.
(1) Financial Security Institute notice on fintech service vulnerability assessment (2019.10)
– Web: 12 vulnerability check items
– Mobile apps (Android, iOS): 17 vulnerability check items
(2) Build the system with these items in mind
– Using the items in the two application areas above as the basis, derive secure development requirements as elements to reference during development
* Business and related inquiries: T) 02-322-4688, F) 02-322-4646, E) info@wikisecurity.net