China: Central Bank releases three financial industry standards on cloud computing technology
The National Financial Standardization Technical Committee ('NFSTC') announced, on 27 October 2020, that the People's Bank of China has released three financial industry standards on cloud computing: the Technical Framework of Cloud Computing Technology Financial Application Specification (JR/T 0166-2020) ('the Cloud Computing Framework Specification'); Cloud Computing Technology Financial Application Specification Security Technical Requirements (JR/T 0167-2020) ('the Cloud Computing Security Specification'); and Cloud Computing Technology Financial Application Specification Disaster Recovery (JR/T 0168-2020) ('Cloud Computing Disaster Recovery Specification'). In particular, the NFSTC noted that the Cloud Computing Security Specification focuses on the potential risks of cloud computing financial applications, outlines requirements for data security and security management, among others things, and proposes policies based on three categories: basic requirements, extended requirements, and enhanced requirements. In addition, the NFSTC outlined that the Cloud Computing Disaster Recovery Specification stipulates technical requirements that all cloud computing participants should follow when measuring the cloud computing platform's disaster tolerance capability and carrying out the disaster recovery work of the cloud computing platform.
You can read the press release here, the Cloud Computing Disaster Recovery Specification here, the Cloud Computing Framework Specification here, and Cloud Computing Security Specification here, all only available in Chinese.