JR/T 0175-2019 in English
VALIDFinancial mobile application software security management specification
- Issued on:2019-09-30
- Implemented on:2019-09-30
- File Format:PDF
- Delivery:Via email within 1~3 business days
$272.00
本标准规定了证券期货业信息系统建设过程中的总体要求、单元测试、集成测试、系统测试、系统集成测试、验收测试等测试活动的内容。
本标准适用于证券期货业市场核心机构、证券期货基金经营机构、证券期货信息技术服务机构开展证券期货业计算机软件和外部信息系统测试工作。
注 1：市场核心机构，如证券期货交易所、证券登记结算机构、期货市场监控中心等；
注 2：市场经营机构，如证券公司、期货公司、基金公司等；
注 3：市场服务机构，如软件开发商、信息商、服务商等。
Introduction
Analysis of the core content of the standard
| Test level | Test object | Coverage requirement |
|---|---|---|
| Unit test | Program module/class | 100% statement coverage of Class A business |
| Integration test | Interface between modules | 100% call coverage |
| System test | Complete product system | Full coverage of key business flows |
Description of special test types
Emergency drill test requires simulation of 7 types of emergency scenarios, focusing on RTO/RPO indicator verification. The standard clearly stipulates that the test environment must simulate the real production network topology.
Full market test is a unique test type in the securities industry and must be conducted in a production environment. It is necessary to verify the system coordination capabilities of the exchange and the participants.
Key points of implementation
- Test documents must include 9 types of standardized outputs such as Test workload estimate
- Defect management adopts an 11-state flow mechanism and needs to record root cause classification
- Acceptance testing must be performed by an independent third party, and market service agencies are not allowed to perform self-acceptance
Technology evolution analysis
This standard explicitly writes grey box testing technology into financial industry specifications for the first time, and recommends that the combination test method give priority to the use of Pairwise technology. Compared with GB/T 15532, differentiated testing requirements corresponding to business classifications (A/B/C) have been added.
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
JR/T 0067-2021 in English
The cybersecurity graded protection evaluation requirements for securities and futures industries
2021-08-30 -
JR/T 0305-2025 in English
Standardization of the insurance industry information technology performance evaluation index system
2025-02-17 -
JR/T 0133-2015 in English
Basic requirements for securities and futures industry information system custody
2016-01-13 -
JR/T 0103-2014 in English
Securities trading data exchange codec protocol
2014-02-10
