第三方支付服务提供商的安全控制与实施 指导与要求

[中文适用范围]： 本文件规定了第三方支付服务提供商（TPPSPs）的安全控制和实施要求与指南。本文件涉及TPPSPs从开发和测试到安装、操作和审计系统的整体安全控制。这些安全控制包括：— 安全治理控制；— 跨职能控制；— 职能特定控制。 [外文原描述]： This document gives requirements and guidance on security controls and implementation for third-party payment service providers (TPPSPs). This document deals with the overall security controls of TPPSPs from developing and testing to installing, operating and auditing the system. These security controls consist of: — security governance controls; — cross-functional controls; — function-specific controls.