Recently, the China Securities Regulatory Commission issued four financial industry standards: "Securities companies OTC business capital service interface", "Securities and futures industry institutions internal interface account management", "securities and futures industry institutions internal interface information data", "Securities and futures industry information system penetration Test Guide".

The financial industry standard "Securities Companies OTC Fund Service Interface" defines the business process and scenario of securities companies to carry out OTC fund services, and defines the format, elements, and interface form of business messages, which is applicable to the data exchange between securities companies' OTC fund settlement system and settlement users. The formulation and implementation of the standard will help improve the automation level of securities companies' OTC fund services, provide conditions for the realization of the dynamic monitoring and supervision of OTC funds, and play a positive role in further standardizing the development of OTC business.

Two financial industry standards, "Internal Interface Account Management of Securities and Futures Industry Institutions" and "Internal Interface Information Data of Securities and Futures Industry Institutions", respectively regulate the data interface of the internal account management business system and the information data business system. By sorting out the data interaction scenarios between the core business modules, It puts forward relevant requirements for data fields, data formats and data interaction protocols of data interfaces, which has guiding significance for industry organizations to efficiently establish internal information systems and realize cross-platform resource sharing.

The financial industry standard provides a set of general information system penetration testing framework, providing operational guidance for ensuring test quality and controlling security risks in the planning, design, execution, results and risk management of penetration testing. The implementation of the standard will help standardize industry institutions to carry out penetration testing work safely and stably, strengthen the safe operation of information systems, improve the industry's network security protection capabilities, and help the smooth operation of the capital market.

In the next step, the CSRC will continue to promote the information construction of the capital market, focus on the formulation of basic standards, promote the development of industry information exchange, information security and other fields of standards, and constantly consolidate the foundation of science and technology supervision.