数据主权安全能力的成熟度模型构建研究  

Research on the Maturity Model of Data Sovereignty Security Capability

作　　者：黄海瑛[1] 文禹衡 Huang Haiying;Wen Yuheng

机构地区：[1]武汉大学信息管理学院,湖北武汉430072 [2]湘潭大学知识产权学院,湖南湘潭411105

出　　处：《图书与情报》2021年第4期29-38,共10页Library & Information

基　　金：国家自然科学基金面上项目“多源大数据融合驱动的产权管理模型设计及领域实证研究”(项目编号:71774123);深圳市科学技术创新委员会深圳市科技计划项目“面向网络主权的政务大数据语义关联、全局融合与深度学习关键技术研究”(项目编号:JCYJ20180302173459920);2021年国家社科基金青年项目“数据要素确权的法律供给研究”(项目编号:21CFX007)研究成果之一。

摘　　要：构建数据主权安全能力成熟度模型,用于评价国家的数据主权安全能力状况,针对薄弱环节提出改进策略,为今后制定相关标准提供智力支持。以能力成熟度模型的标准和相关研究成果为基础,运用层次分析法,确定模型的三维结构,识别关键过程域,构建能力维度,进而划定成熟度等级。数据主权安全能力成熟度模型由"数据本地存储""数据跨境流动"和"数据域外管辖"3个关键过程域,"文化教育""技术工具""政策战略""组织建设"和"立法司法"5项能力维度,以及"初始级""发展级""必要级""充分级"和"优化级"5级成熟度共同构成。其中,能力维度包括19种构成要素,其是描述能力成熟度等级所要求的29个关键实践的基础。This Paper aims to build a maturity model of data sovereignty security capability for evaluating the state of a country’s data sovereignty security capability and proposing improvement strategies for weak links,so as to provide intellectual support for the formulation of relevant standards in the future.Based on the standards of the capability maturity model and related research results,the three-dimensional structure of the model,with the analytic hierarchy process,is determined,the key process areas are identified,the capability dimension is constructed,and the maturity level is determined.The study found that the maturity model of data sovereignty security capability consists of three key process areas,namely,"local data storage","cross-border data flow"and"extraterritorial jurisdiction of data",five capability dimensions,namely,"cultural education","technical tools","policy strategies","organizational construction",and"legislation and judiciary",and five maturity levels,namely,"initial level","development level","necessary level","sufficiency level"and"optimization level".In which the capability dimension includes 19 components,which are the basis for describing the 29 key practices required by the capability maturity level.

关 键 词：DSSCMM 数据主权 安全能力 成熟度等级 数据流动 

分 类 号：G203[文化科学—传播学]