GB/T 36073-2018Data management capability maturity assessment mode (English PDF)

Foreword

This Standard was drafted in accordance with the rules given in GB/T 1.1-2009.

Attention is drawn to the possibility that some of the elements of this Standard

may be the subject of patent rights. The issuing authority shall not be held

responsible for identifying any or all such patent rights.

This Standard was proposed by and shall be under the jurisdiction of National

Technical Committee on Information Technology of Standardization

Administration of China (SAC/TC 28).

The drafting organizations of this Standard. China Electronics Standardization

Institute, Yushufang (Beijing) Technology Consulting Co., Ltd., Beijing

University, Renmin University of China, Tsinghua University, China Construction

Bank Corporation, China Everbright Bank, Huawei Technologies Co., Ltd.,

Alibaba Cloud Computing Co., Ltd., Shanghai Hongyi Software Technology Co.,

Ltd., Sequoia Capital China Fund.

Main drafters of this Standard. Dai Hong, Bin Junzhi, Mei Hong, Che Pinjue, Du

Xiaoyong, Wu Jianming, Gao Lin, Li Zhenjun, Wu Dongya, Zhao Jinghua,

Zhang Qun, Li Bing, Liu Chen, Yuan Fang, Che Chunlei, Tian Jiang, Wang Jing,

Fu Haifang, Chen Xuexiu, Long Lingyun, Xu Yang, Wang Qi, Wang Qian, Yide

Riwen.

Data management capability maturity assessment

mode

1 Scope

This Standard provides data management capability maturity assessment

mode as well as the corresponding maturity level. It defines 8 capability areas.

data strategy, data governance, data architecture, data application, data

security, data quality, data standards and data life cycle.

2 Normative references

The following referenced documents are indispensable for the application of

this document. For dated references, only the edition cited applies. For undated

references, the latest edition of the referenced document (including any

amendments) applies.

GB/T 35295, Information technology - Big data - Term

3 Terms and definitions

For the purposes of this document, the terms and definitions defined in GB/T

35295 as well as the followings apply.

confidentiality, integrity and availability of data

4 Abbreviations

The following abbreviations apply to this Standard.

5 Summary

The management of data requirements is mainly reflected at the project level.

There is no unified management process. It is mainly the passive management.

The specific features are as follows.

6 Data strategy

Data strategy planning is the result of consensus among all stakeholders. It

determines the motivation for data management and application from the macro

and micro levels. It comprehensively reflects the needs of data providers and

consumers.

7 Data governance

Guarantee the standardized operation of data management and data

application functions. Establish a corresponding institutional system.

8 Data architecture

Metadata management is a set of processes related to the creation, storage,

integration and control of metadata.

9 Data application

Data opening and sharing refers to the selective opening of data within the

organization in accordance with a unified management strategy.

10 Data security

Data security strategy is the core content of data security. In the process of

formulation, it needs to be unified in accordance with organizational

management requirements, regulatory requirements, and related standards.

......