Markdown Editor
Mở trình soạn thảo

Bộ mẫu kiến trúc giải pháp ngân hàng

Giải pháp ngân hàng theo chuẩn ngành: miền dịch vụ BIAN, thanh toán ISO 20022, open banking với FAPI 2.0, sổ cái thanh toán, định danh khách hàng, phạm vi PCI DSS và sổ đăng ký DORA.

Bước 1

Thiết kế tham chiếu

  1. Banking Solution Design Template (BIAN 14.0)

    Đầy đủ

    Bank solution mapped to BIAN 14.0: scope, alignment level, release changes, service domain mapping, control records, APIs, core interplay, ISO 20022, data, coexistence, regulation

    BIAN Service Landscape 14.0

  2. ISO 20022 Payments Design Template (CBPR+, SEPA, Fedwire)

    Đầy đủ

    ISO 20022 payments solution: scheme register, message set and versions, flows, canonical model, structured and hybrid address, identifiers, truncation, screening, VoP, reconciliation, cutover

    ISO 20022; Swift CBPR+ (SR2026 payments changes deferred); EPC SEPA rulebooks; Regulation (EU) 2024/886

  3. Open Banking API Design Template (PSD2, FAPI 2.0)

    Đầy đủ

    Open banking dedicated interface: PSD2/RTS, PSR and PSD3, FiDA and CFPB 1033 status, API standard choice, FAPI 2.0 controls, consent life cycle, SCA, TPP certificates, dashboards, reporting

    PSD2 and RTS (EU) 2018/389; FAPI 2.0 Security Profile (Final 2025); NextGenPSD2 1.3.16; UK Open Banking 4.0.1

  4. Payment Ledger System Design Template (Reference Design)

    Đầy đủ

    Payments and double-entry ledger: idempotency keys, payment state machine, PSPs, outbox, reconciliation, audit, PCI DSS scope

Bước 2

Bảo mật

  1. CIAM Solution Design Template (Passkeys, OIDC, FAPI 2.0)

    Đầy đủ

    Journeys and risk, proofing, passkeys and step-up, recovery, OAuth/FAPI profiles, consent and GDPR rights, B2B2C, fraud, scale, KPIs, migration

    NIST SP 800-63-4; OpenID Connect Core 1.0; RFC 9700; FAPI 2.0 Security Profile; WebAuthn Level 3

  2. Threat Model Template (STRIDE)

    Đầy đủ

    STRIDE threat model: scope, DFD with trust boundaries, assets, threats per element, L x I rating, mitigations, risk acceptance

    STRIDE

  3. PCI DSS Scoping and Segmentation Design Template (v4.0.1)

    Đầy đủ

    Card data flows and inventory, scope categories, component register, tokenisation and P2PE, segmentation controls and tests, TPSPs, TRAs, scope confirmation

    PCI DSS v4.0.1 (structure and requirement numbers only); PCI SSC scoping and segmentation supplements
Bước 3

Quy định và tuân thủ

  1. DORA Register of Information Template (ICT Third-Party Arrangements)

    Đầy đủ

    DORA Art. 28(3) register: templates B_01.01 to B_99.01, arrangements, providers and LEI/EUID, supply chain ranks, functions, assessments, concentration, exit

    Regulation (EU) 2022/2554 (DORA) Art. 28 to 30; Implementing Regulation (EU) 2024/2956

  2. Data Residency and Sovereignty Assessment Template (GDPR Chapter V)

    Đầy đủ

    Data tiers, flow map, jurisdiction matrix, Chapter V mechanisms, TIAs, PIPL and DPDP examples, Data Act Art. 32, key custody, sovereign cloud scoring, decision

    GDPR Chapter V; SCCs 2021/914; EU-US DPF 2023/1795; EDPB Recommendations 01/2020 v2.0; Data Act Art. 32