关于落实《网上银行业务管理暂行办法》有关规定的通知 Provisions Relevant to the Implementation of the《Administration of Online

llegal access and attacks. This aspect mainly covers the response measures and implementing procedures in case of internal or external illegal access and attacks that result in data theft, loss of funds, damage to programs, system paralysis, etc.

　　4) System and arrangements for periodic testing of the rationality and effectiveness of the service operation contingency plan and continuity plan, including:

　　5) a schedule for periodic testing should be in place;

　　6) testing should be done under the direct supervision of senior management;

　　7) any problems discovered during testing should be solved in a timely manner, etc.

　　(4) Internal monitoring capabilities

　　Institutions applying to offer online banking services shall establish an audit system for their online banking services and shall have appropriate personnel to audit such services.

　　3. Requirements on Oversight of, and Reporting on, Online Banking Services

　　Existing PBOC requirements on risk oversight governing traditional banking services shall also apply to online banking services. However, the complexity and formidability of the task of overseeing online banking services need to be fully realized, the oversight of technology related risks needs to be stressed, banking institutions shall be urged to strengthen examinations of the security of their online banking service operations and the training of the personnel overseeing online banking services shall be improved, so as to establish professional capabilities to oversee such services.

　　Additionally, the PBOC shall urge commercial banks to establish online banking service information management systems and report on the status of the operation of, and problems existing in, their online banking services to the PBOC in accordance with the following requirements:

　　(1) periodically submitting to the regulatory and statistics departments of the PBOC and its (sub-)branches a Statistical Table on the Basic Information Concerning Online Banking Services, submitting, by 10 April, 10 July and 10 October each year, information on the onlin

e banking services offered during the preceding quarter, submitting, by 10 January each year, information on the online banking services offered during the fourth quarter of the preceding year and submitting, by 20 January each year, information on the online banking services offered during the entire preceding year;

　　(2)submitting, at the beginning of each year, a report summing up basic information concerning the online banking services offered during the preceding year, existing problems and development plans for the current year to the regulatory department of the PBOC;

　　(3)pursuant to Article 24 of the Procedures, establishing a system for reporting major online banking service operational matters and reporting to the regulatory authority such major matters as major security leaks, hacker intrusions, changes in internet address names, etc. that occur in the course of operating online banking services.

　　All banking institutions shall, commencing from the first quarter of 2002, report to the PBOC information on their online banking services using the prescribed report format. The regulatory department of the PBOC has the right to punish, in accordance with relevant provisions, those banking institutions that fail to report the basic information on their online banking services and risk status in accordance with requirements.

　　4. Miscellaneous Matters

　　Pursuant to the PRC, Commercial Banking Law, the offering of online banking services by urban credit cooperatives, rural credit cooperatives and postal savings institutions may be handled by reference hereto.

　　All branches and business management departments of the PBOC are requested to transmit this Circular to such relevant financial institutions in their jurisdictions as foreign-funded banks, etc. after receipt hereof

┨网页设计特效库┠ http://www。z┗co⊙l。com/网页特效/