GB/T 42927-2023 (English Version)

Standard No.: GB/T 42927-2023
Language: Chinese, Available in English version
Release Date: 2023
Published By: General Administration of Quality Supervision, Inspection and Quarantine of the People‘s Republic of China
Latest: GB/T 42927-2023

Scope: The financial industry open source software evaluation system and corresponding evaluation models and evaluation methods standardize the introduction, evaluation and selection of open source software in financial institutions and the evaluation of open source software

Introduction

1. Background of Standard Formulation and Analysis of Technology Evolution

As the financial industry becomes increasingly dependent on information technology, open source software is increasingly used in the financial sector. However, the complexity, diversity and potential risks of open source software also pose challenges to financial institutions. The formulation of GB/T 42927—2023 aims to provide financial institutions with a set of systematic open source software evaluation standards to help them better select and manage open source software.

2. Comparison of standard frameworks and core dimensions

Evaluation dimensions	Secondary indicators	Weight recommendations
Open source license	- Open source license information - Rights and restrictions - License compatibility	20%
Industry recognition	- Commercial version - Application cases - Third-party evaluation results	15%
Product vitality	- Community activity - Code life cycle - Attention	25%
Security	- Vulnerability - Intrusion Detection and Prevention - Confidentiality	25%
Compatibility	- Operating environment compatibility - Interface compatibility - Data compatibility	15%

3. Implementation Recommendations and Best Practices

Case Study: A large bank adopted the GB/T 42927-2023 standard for evaluation when introducing open source software. By comprehensively considering the compatibility of open source licenses, industry recognition, and product security, the bank successfully selected an open source solution that meets both business needs and compliance requirements.

Implementation recommendations:

Establish a professional evaluation team that includes technical, legal, and industry experts.
Develop a detailed evaluation plan to ensure that all key dimensions are covered.
Combine quantitative analysis with qualitative evaluation to improve the accuracy of evaluation results.
Regularly review the performance and compliance of open source software to respond to technological changes and new security threats.

GB/T 42927-2023 history

2023 GB/T 42927-2023 Evaluation Specifications for Open Source Software in the Financial Industry