附件9 ICS35.240.40 CCSA11 JR 中华人民共和国金融行业标准 JR/T0232—2021 银行互联网渗透测试指南 Guidelinesforinternetpenetrationtestinbank 2021-07-22发布 2021-07-22实施 中国人民银行发布JR/T0232—2021 I目  次 前言.....................................................................................................................................................................III 引言.......................................................................................................................................................................IV 1范围.....................................................................................................................................................................1 2规范性引用文件.................................................................................................................................................1 3术语和定义.........................................................................................................................................................1 4概述.....................................................................................................................................................................3 5渗透测试策划.....................................................................................................................................................3 5.1概述.............................................................................................................................................................3 5.2确定测试范围.............................................................................................................................................3 5.3确定测试引用文档.....................................................................................................................................3 5.4确定测试项.................................................................................................................................................4 5.5确定被测试特性和不被测试特性.............................................................................................................4 5.6确定测试方法与测试通过准则.................................................................................................................4 5.7确定暂停准则和恢复条件.........................................................................................................................4 5.8测试交付项.................................................................................................................................................4 5.9确定测试活动、任务与进度.....................................................................................................................4 5.10明确环境需求...........................................................................................................................................5 5.11分配职责、权限和各部门间的工作衔接...............................................................................................5 5.12明确人员配备和培训目标.......................................................................................................................5 5.13明确风险和应急措施...............................................................................................................................5 5.14确定质量保证过程...................................................................................................................................5 5.15测试策划阶段文档...................................................................................................................................5 6渗透测试设计.....................................................................................................................................................6 6.1概述.............................................................................................................................................................6 6.2确定测试范围.............................................................................................................................................6 6.3被测试特征、测试方法与通过准则................................................