CEPREI Issues First Overseas DSMM Level 3 Certificate
Recently, Chinese Life Insurance (Overseas) Company Limited. ("Chinese Life (Overseas)") successfully passed the on-site assessment performed by CEPREI Certification Body and obtained the DSMM (Data Security Capability Maturity Model) Level 3 certificate. This is the first overseas DSMM Level 3 certificate issued by China's authoritative certification body since the official implementation of GB/T37988-2019 Information Security-Technology Data Security Capability Maturity Model on March 1, 2020. It further proved the leading role of Chinese standards in the globalization of enterprises, and effectively supported the Memorandum of Cooperation on Promoting Cross-border Data Flow in the Guangdong-Hong Kong-Macao Greater Bay Area" signed by the Cyberspace Administration of China and the Innovation, Technology and Industry Bureau of the Hong Kong SAR Government on June 29 this year, contributing to the safe and orderly cross-border flow of data in the Guangdong-Hong Kong-Macao Greater Bay Area.
In recent years, China has attached great importance to data security which has become a major issue related to national security and economic and social development. In August this year, the Fifth Electronics Research Institute of the Ministry of Industry and Information Technology, Shenzhen Data Exchange, Guangzhou Data Exchange, Jinan University and other units jointly launched the "Data Cross-border Compliance and Development Escort Program" to promote the compliant cross-border flow and effective use of enterprise data in response to the needs of cross-border compliance management of enterprise data, and to safeguard the cross-border compliance and development of enterprise data. CEPREI Certification Body also assists enterprises in identifying cross-border compliance risks of their own business data through cross-border data compliance assessment services, and builds a solid data security shield for enterprises.
In this project, CEPREI Certification Body carried out three stages of work for a number of business systems of Chinese Life (Overseas): DSMM3 gap analysis, capability improvement and assessment certification. The project focused on the following aspects: top-level construction of data security, data security capability system, data security assessment contents, issue correction and special disposal, etc. Practical improvement suggestions were put forward to help the enterprise improve itself and correct issues. The assessment of Chinese Life (Overseas) in Shenzhen and Hong Kong sites had completed. Through the project, we assisted Chinese Life (Overseas) to find out the "family background" of Chinese Life(Overseas) with regard to data assets, data security capabilities and security management levels, and helped promote the construction of the company's data security system to meet digital transformation and regulatory requirements.
The DSMM standard, formulated under the leadership and organization by the National Information Security Standardization Technical Committee, is one of the important national standards in the field of data security management in China, and is also a summary and improvement of the best practices in the field of data security in China. The certification of Chinese Life (Overseas) will enhance its competitive advantages in the overseas life insurance market, and also mark the internationalization of China's self-developed data security standards.
As one of the first authoritative certification bodies that were put on records for DSMM at the Certification and Accreditation Administration of the People's Republic of China (CNCA), CEPREI Certification Body is carrying out DSMM assessment and certification nationwide, with its customers covering industries including government, finance, electric power, communications and other key industries. If an organization or individual wants to join the "Data Cross-border Compliance and Development Escort Program", please call the service hotline of CERPEI Certification Body: 4008-301-909.