中证协最新调研，券业IT迎“大考”

Core Viewpoint - The China Securities Association (CSRC) has initiated a comprehensive evaluation of the three-year plan for enhancing network and information security in securities firms, focusing on the effectiveness of the plan's implementation from 2023 to 2025 [1][2]. Group 1: Evaluation and Assessment - The CSRC's survey aims to systematically assess the achievements in network security construction across the industry, marking the first comprehensive review since the plan's implementation [1][2]. - The survey covers six core areas: technology governance, investment mechanisms, system architecture, research and testing, operational support, and security protection [2]. - A structured assessment framework has been established, consisting of "6 main tasks + 71 specific evaluation questions," including 55 mandatory tasks and 16 encouraged tasks [2]. Group 2: Investment and Talent - The survey sets quantitative standards for investment in information technology, requiring an average investment of no less than 10% of the average net profit and at least 7% of the average operating revenue from 2023 to 2025 [3]. - The proportion of information security professionals must reach 3% of the total number of IT professionals, with a minimum absolute number of 2 [3]. - The survey also emphasizes the need for continuous security awareness training, mandating at least one training session per year for all employees [3]. Group 3: Industry Trends and Challenges - In 2023, 44 securities firms reported a total information technology investment of 28.11 billion yuan, with 14 firms investing over 1 billion yuan, accounting for 70.46% of total investments [4]. - The trend of increasing investment is expected to continue in 2024, with 30 firms increasing their expenditures, particularly among leading firms [4]. - The focus of investments is shifting from traditional infrastructure to core system upgrades, data security, and artificial intelligence applications [4]. - The industry faces significant cost pressures, including high expenses related to technology and challenges in quantifying investment returns [4][5]. Group 4: Cost Reduction and Efficiency - The industry is exploring feasible paths to reduce costs and increase efficiency, with leading firms narrowing their IT investments to focus on high-frequency, business-enabling areas [5]. - Smaller firms are leveraging mature general models or industry solutions to quickly cover core business needs while avoiding high custom development costs [5].