First in China! Data Storage Security Group Standard Led by CEPREI Published
A few days ago, China's first group standard in the field of data storage security, T/CITIF 002-2023 Data Storage Security Capability Maturity Model (DSSM), was put on record on the National Group Standard Information Platform of the National Standards Committee after being reviewed, and was officially published and implemented at the first China Data Governance Annual Conference.
Under the guidance of the China Electronic Information Industry Federation (hereinafter referred to as the Federation), the DSSM standard was jointly developed by more than 20 industry representative enterprises and scientific research institutes led by CEPREI. Other standards published at the same time include T/CITIF 001-2023 Data Integration and Service- Capability Assessment System- Capability Requirements and T/CITIF 003-2023 Information Technology Service- Data Security Capability Model.
The three standards respond to the requirements of "building a basic data institutional system that adapts to the characteristics of data, conforms to the laws of digital economy development, ensures national data security, and demonstrates innovation driven" put forward by Data Article 20. Each has its own focus and is closely related, empowering the upstream, midstream and downstream of the data industry and the early, middle and late stages of the data life cycle, filling the gap of standards in the fields of data integration, storage and service in China. The three standards, together with CS (Information system construction and service- Capability assessment system) standards and other standards, form a system that promotes the modernization and development of the national data governance system and governance capabilities.
As the leading unit for the preparation of the standard, CEPREI Certification Body is deeply involved in research and development process for data governance standards such as Data Governance Based on ISO/IEC 38500, Information Technology Service- Governance Part 5: Data Governance Specification, Information Technology Service- Data Asset- Management Requirements, Information Security Technology- Big Data Service Security Capability Requirements and Information Technology- Big Data Data Governance Implementation Guide on the basis of the research done in the early stage on the relationship between data maturity management and cloud computing& big data and the evaluation of key technologies. With rich standard implementation and assessment experience, CEPREI is one of the first batch A-level assessment agencies for DCMM and DSMM in China, and the only assessment agency in China that has been rated as excellent for two consecutive years, and can provide consulting and assessment services related to data governance and data security system planning and construction.
In the future, under the guidance of the Federation, CEPREI will build a DSSM standard implementation service system, carry out research on the assessment plan for the implementation of data storage security capability maturity, widely solicit pilot units for standard implementation, systematically assess the data storage security capability level of the pilot units, organize DSSM standard publicity and implementation activities, interpret national policies, standard contents and practice cases, and strengthen the application and promotion of DSSM standards.
Attached: List of DSSM standard drafting units
CEPREI Certification Body, Beijing Guoke Rongsheng Technology Group Co., Ltd., Huawei Technologies Co., Ltd., Beijing Baidu Netcom Science Technology Co., Ltd., Beijing E-Hualu Information Technology Co., Ltd., Shenzhen Zhengtong Electronics Co., Ltd., Unigroup Guoxin Microelectronics Co., Ltd., Digital Guangdong Network Construction Co., Ltd., Nanjing eCloudTech Technology Co., Ltd., Shenzhen Tencent Computer Systems Co., Ltd., iFLYTEK Co., Ltd., Guizhou Big Data Application Promotion Center, Guangdong Guoteng Quantum Technology Co., Ltd., China Resources Digital Technology Co., Ltd., New H3C Technology Co., Ltd, Wuhan East Lake Trading Center for Big Data Co., Ltd., Guizhou Cloud Big Data Industry Development Co., Ltd., Dawning Information Industry Co., Ltd., Powerleader Computer System Co., Ltd., Beijing Kingsoft Office Software Co., Ltd., Youwang Cloud Computing Co., Ltd., State Grid Integrated Energy Service Group Co., Ltd., Beijing Purple Light Storage Technology Co., Ltd., United International College of Beijing Normal University-Hong Kong Baptist University , Hunan University, Shenzhen SecRisk Information Technology Co., Ltd., Harbin Institute of Technology, etc.