JR/T 0276-2023 in English

本文件提供了在证券期货业信息系统建设过程中开展渗透测试的整体流程，同时提供了在渗透测试
策划、渗透测试设计、渗透测试执行、渗透测试总结、渗透测试风险管理等环节如何保障测试质量、控制安全风险的操作指南。
本文件适用于证券期货行业机构开展信息系统渗透测试过程中的渗透测试策划、渗透测试设计、渗透测试执行、渗透测试总结及渗透测试风险管理等工作，可供其他金融机构参考。

Scope

This document provides the overall process for conducting penetration testing during the construction of information systems for the securities and futures industries. It also provides how to ensure test quality in penetration testing planning, penetration testing design, penetration testing execution, penetration testing summary, penetration testing risk management, etc. , Operational guide for controlling security risks. This document is applicable to the penetration test planning, penetration test design, penetration test execution, penetration test summary and penetration test risk management during the information system penetration testing process carried out by securities and futures industry institutions, and can be used as a reference for other financial institutions.