Article 19
|
(Security control and management of a mobile app)
- An organization shall take appropriate measures to deidentify information when sending sensitive information to a user via text message or other messaging method via its mobile app.
- An organization shall create the detection system to identify fake mobile apps to protect the rights and interests of its clients.
- When activating a mobile app, an organization shall alert users of its app of potential risks if it detects the user's mobile device may be compromised (such as rooting, jailbreaking and USB debugging).
|