Recently, TTG T-LinxTM system has successfully passed the Level 2 certification of “Graded Protection of Information System Security", which means that our continuous construction of network information security has been recognised by the national third-party authority. This fully demonstrates TTG’s long-standing emphasis on data security handled by the T-LinxTM system and the overall network security, and our determination to provide users and bank customers with a safe and reliable information security environment.
“Graded Protection of Information System Security” certification is categorised into 5 levels.
The significance of TTG T-LinxTM system for the certification
T-LinxTM system is able to:
(i) protect the payment system from malicious attacks initiated by external organisations and resource-owned threat sources, general natural disasters, and other corresponding levels of important resource damage;
(ii) discover/identify important security vulnerabilities and security incidents;
(iii) restore some functions within a period of time, after being damaged by an attack.
This “Graded Protection of Information System Security” evaluation conducted tests and analysis on the overall security of the T-LinxTM Integrated Payment system. Based on relevant links and stages such as static assessment, field testing and comprehensive assessment, the testing organisation had conducted a comprehensive evaluation of the system, in the aspects of safe physical environment, safe communication network, safe area boundary, safe computing environment, safety management centre, safety management system, safety management organisation, safety management personnel, and safety construction management and safety operation and maintenance management, etc.
In terms of management system, a relatively complete information security assurance system has been established.
In terms of data protection, storage integrity and encryption protection are adopted for authentication data.
In terms of system planning and construction, combined with the safety requirements of the system design plan, it strictly follow the work requirements of “Graded Protection” in the aspects of grading, filing, evaluation, and rectification.
The “Graded Protection” evaluation lasted more than half a year from project establishment to completion. With the efforts of the technical security team, the T-LinxTM Integrated Payment system has achieved good results in this evaluation.
The building of data security and network security capabilities is related to the information security of enterprises and customers who use the banking financial system. In the future, TTG will continue to strengthen the information security capabilities and the network risk supervision system to ensure the stable operation of data storage and service systems, and provide a reliable and guaranteed network system platform for all bank users and partners.