Markdown Editor
Mở trình soạn thảo

Bộ mẫu kiến trúc giải pháp thanh toán

Thiết kế hệ thống thanh toán: ISO 20022, open banking, thanh toán thẻ, sổ cái, phạm vi PCI DSS và sổ đăng ký bên thứ ba ICT.

8 mẫu trong 2 bước, theo thứ tự sử dụng. Mở mẫu bất kỳ trong trình soạn thảo, điền nội dung rồi xuất ra PDF, DOCX hoặc HTML.

Bước 1

Thiết kế tham chiếu

  1. ISO 20022 Payments Design Template (CBPR+, SEPA, Fedwire)

    Đầy đủ

    ISO 20022 payments solution: scheme register, message set and versions, flows, canonical model, structured and hybrid address, identifiers, truncation, screening, VoP, reconciliation, cutover

    ISO 20022; Swift CBPR+ (SR2026 payments changes deferred); EPC SEPA rulebooks; Regulation (EU) 2024/886

  2. Open Banking API Design Template (PSD2, FAPI 2.0)

    Đầy đủ

    Open banking dedicated interface: PSD2/RTS, PSR and PSD3, FiDA and CFPB 1033 status, API standard choice, FAPI 2.0 controls, consent life cycle, SCA, TPP certificates, dashboards, reporting

    PSD2 and RTS (EU) 2018/389; FAPI 2.0 Security Profile (Final 2025); NextGenPSD2 1.3.16; UK Open Banking 4.0.1

  3. Card Acquiring Payments Design Template (3-D Secure, PCI DSS)

    Đầy đủ

    Card acquiring design: parties, 3-D Secure flow, SCA exemptions, network tokens, fraud, chargebacks, PCI DSS scope, interchange and fee reconciliation

    EMV 3DS 2.2.0 to 2.3.1.1; PCI DSS v4.0.1; Delegated Regulation (EU) 2018/389

  4. Payment Ledger System Design Template (Reference Design)

    Đầy đủ

    Payments and double-entry ledger: idempotency keys, payment state machine, PSPs, outbox, reconciliation, audit, PCI DSS scope

    PCI DSS v4.0.1 and SAQ A (Jan 2025) cited by requirement number only; ISO 4217; RFC 9457; draft-ietf-httpapi-idempotency-key-header-08 (I-D)

  5. API Security Review Template (OWASP API Top 10 2023, ASVS 5.0)

    Đầy đủ

    API scope, method and rating, inventory and shadow endpoints, trust boundaries, API1 to API10 review, ASVS 5.0 API checklist, findings, decision, retest

    OWASP API Security Top 10 2023; OWASP ASVS 5.0.0
Bước 2

Quy định và tuân thủ

  1. PCI DSS Scoping and Segmentation Design Template (v4.0.1)

    Đầy đủ

    Card data flows and inventory, scope categories, component register, tokenisation and P2PE, segmentation controls and tests, TPSPs, TRAs, scope confirmation

    PCI DSS v4.0.1 (structure and requirement numbers only); PCI SSC scoping and segmentation supplements

  2. DORA Register of Information Template (ICT Third-Party Arrangements)

    Đầy đủ

    DORA Art. 28(3) register: templates B_01.01 to B_99.01, arrangements, providers and LEI/EUID, supply chain ranks, functions, assessments, concentration, exit

    Regulation (EU) 2022/2554 (DORA) Art. 28 to 30; Implementing Regulation (EU) 2024/2956

  3. Fraud Risk Assessment Template (GAO Framework, UK Failure to Prevent Fraud)

    Đầy đủ

    Scope and size test, governance, scales, scheme inventory, inherent and residual scoring, anti-fraud controls, override, analytics, six principles, actions

    GAO-15-593SP Fraud Risk Framework; GAO Green Book 2025 Principle 8; ECCTA 2023 s.199