ChatGPT - 資安與金融業

OpenAI於2022年11月推出的ChatGPT(Chat Generative Pre-trained Transformer)是一款近期非常流行的聊天機械人,廣泛應用於資料搜集、文章撰寫、語言翻譯、程式碼編寫和調整、計算等領域。那麼,ChatGPT在金融方面能夠提供什麼樣的助力呢?然而,ChatGPT可能會出現資安問題?    

1966年,麻省理工學院推出了世界上公認的第一個聊天機械人Eliza,其應用範圍主要是模擬與心理治療師的對話。隨著聊天機械人的功能不斷演進,其應用範圍已經不僅限於單一用途。現代的聊天機械人配備學習功能,能夠自動學習和理解人類語言的語法和語意,並具備與人類進行自然對話的能力。    

金融業可以利用ChatGPT獲得多種效益。其中最常見的應用之一是在客戶服務方面,為客戶提供24小時不間斷的對話、回覆或推廣,提高客戶的滿意度和體驗。此外,ChatGPT還可以分析大量關於金融方面的數據,從而預測市場的走勢,有助於投資者做出更明智的投資決策。同時還可以應用在機構上的風險評估和風險控制,通過自然語言處理技術來監測客戶的交易行為和交易風險,提高風險管理的效率和準確性。    

ChatGPT雖然可以為金融企業帶來好處,但在資訊安全方面仍然是企業需要考慮的重點。因此,有些企業已經禁用員工使用ChatGPT。這是因為ChatGPT本身需要龐大的資料庫支持運作,其中包括了不少敏感資訊,如個人身分資訊和銀行資訊等。如果這些敏感資訊被非法獲取或洩露,會對用戶和企業造成嚴重的損失。知名消費電子產品及電子元件製造商三星就曾因員工將半導體設備、程式碼相關的資訊上傳給ChatGPT以方便工作,導致公司機密資料外洩。這也表明,企業在使用ChatGPT時需要特別注意資訊安全問題。   

因此,如何對資料進行加密及保護,配合國家如何監管,制定法規會成為ChatGPT的一大課題。只有在資訊安全問題得到充分解決和保障的情況下,ChatGPT才能夠被廣泛使用。   
    

尹展軒   
Senior IT Consultant

More Updates

Further reading

𝗘𝗺𝗽𝗼𝘄𝗲𝗿𝗶𝗻𝗴 𝗧𝗲𝗮𝗺𝘀 𝗔𝗴𝗮𝗶𝗻𝘀𝘁 𝗣𝗵𝗶𝘀𝗵𝗶𝗻𝗴 𝗔𝘁𝘁𝗮𝗰𝗸𝘀

🚨 𝗘𝗺𝗽𝗼𝘄𝗲𝗿𝗶𝗻𝗴 𝗧𝗲𝗮𝗺𝘀 𝗔𝗴𝗮𝗶𝗻𝘀𝘁 𝗣𝗵𝗶𝘀𝗵𝗶𝗻𝗴 𝗔𝘁𝘁𝗮𝗰𝗸𝘀 𝘄𝗶𝘁𝗵 𝗔𝘄𝗮𝗿𝗲𝗻𝗲𝘀𝘀 𝗮𝗻𝗱 𝗧𝗿𝗮𝗶𝗻𝗶𝗻𝗴 🚨 Recently, a new phishing campaign has been making waves. Attackers are sending emails that are masquerading as some popular password management tools. The emails urge for urgent action and tried to trick users into providing their credentials. Attackers change their tactics and impersonations every day and eventually one successful phishing email can quietly infiltrate your entire network and causes data breaches, ransomware attacks, and huge financial losses. No matter how advanced your cybersecurity solutions are, they cannot fully protect your digital assets against a compromised password. The best way to prevent such disasters is through education. Regular phishing awareness campaigns train your employees to recognize, avoid and react to these traps, turning your team into a strong first line of defense.At Ringus, we offer a comprehensive phishing simulation service with the following key features:🔎 Realistic and tailored scenarios🔎 Customizable phishing email distribution🔎 Comprehensive behavioral analyticsContact us today and equip your team with the confidence and knowledge to prevent phishing threats with our service.

𝗛𝗼𝗻𝗴 𝗞𝗼𝗻𝗴'𝘀 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗟𝗮𝘄

⚡𝗛𝗼𝗻𝗴 𝗞𝗼𝗻𝗴'𝘀 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗟𝗮𝘄 𝗧𝗮𝗸𝗲𝘀 𝗘𝗳𝗳𝗲𝗰𝘁 𝗝𝗮𝗻 𝟭, 𝟮𝟬𝟮𝟲 - 𝗜𝘀 𝗬𝗼𝘂𝗿 𝗢𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻 𝗥𝗲𝗮𝗱𝘆?Hong Kong's new cybersecurity legislation will mandate comprehensive security requirements for Critical Infrastructure Operators (CIOs) across 8 designated sectors. Organizations need to act NOW to ensure compliance.🔎 Key Compliance Requirements• Security Management Plans - Detailed cybersecurity frameworks within 3 months of designation• Risk Assessments - Annual comprehensive security evaluations required• Incident Reporting - Defined notification timeframes for security breaches• Emergency Response Plans - Documented protocols for cyber incident management• Regular Audits - Bi-annual security audits with formal reportingAffected Sectors:✅ Banking & Financial Services✅ Telecommunications & Broadcasting✅ Energy & Transportation✅ Healthcare & IT ServicesWhy ISO 27001 is Your Strategic Advantage ❓ Comprehensive implementation of ISO 27001 provides the proven framework that addressing these regulatory requirements, ensuring systematic risk management, incident response procedures, and continuous security monitoring.

𝗧𝘂𝗿𝗻𝗶𝗻𝗴 𝗖𝗼𝗺𝗽𝗹𝗲𝘅𝗶𝘁𝘆 𝗶𝗻𝘁𝗼 𝗦𝗶𝗺𝗽𝗹𝗶𝗰𝗶𝘁𝘆

🌟 𝗧𝘂𝗿𝗻𝗶𝗻𝗴 𝗖𝗼𝗺𝗽𝗹𝗲𝘅𝗶𝘁𝘆 𝗶𝗻𝘁𝗼 𝗦𝗶𝗺𝗽𝗹𝗶𝗰𝗶𝘁𝘆 — 𝗧𝗵𝗲 𝗙𝗿𝗼𝗻𝘁-𝗘𝗻𝗱 𝗝𝗼𝘂𝗿𝗻𝗲𝘆 𝗕𝗲𝗵𝗶𝗻𝗱 𝗢𝘂𝗿 𝗟𝗼𝘄-𝗖𝗼𝗱𝗲 𝗜𝗻𝗻𝗼𝘃𝗮𝘁𝗶𝗼𝗻At Ringus, we believe great digital solutions are born when technology meets empathy.One of our front-end developers recently faced a challenge that perfectly embodied this belief — transforming a complex internal process into an intuitive, user-friendly experience.⚙️ Multiple user roles.🧩 Complicated approval flows.💡 One mission — make it feel effortless.Armed with OutSystems, our developer designed a modular front-end structure that allowed flexibility and scalability for future enhancements.Each UI component was carefully built for reusability, reducing both development effort and maintenance time.To maintain visual consistency, a custom CSS framework was introduced — aligning layouts, interactions, and branding across every page.This design foundation turned complexity into clarity and brought a sense of harmony to the user experience.One highlight was integrating real-time backend logic with the front-end interface, enabling instant responses and smooth data flow.The result was not only a faster, more efficient system, but one that users genuinely enjoyed interacting with.Beyond technical achievements, this project reinforced an important value at Ringus:✨ Empathy drives innovation.When developers truly understand user needs, every design decision becomes meaningful — and every click becomes more human.At Ringus, we continue to transform business challenges into smart, user-centric digital experiences, powered by creativity, collaboration, and low-code technology.