文禹衡　戴文怡

摘   要：基于DSSCMM提出数据主权安全能力成熟度的评估方法和过程，评估后针对我国数据主权安全能力成熟度薄弱环节提出改进建议。构建并运用边际取样法确定有效样本，运用专家调查法确定关键过程域的能力维度权重，构建并运用样本赋分法计算能力维度分，进而确定关键过程域分和数据主权安全能力分。数据本地存储、数据跨境流动、数据域外管辖的能力成熟度都达到充分级，但数据域外管辖的能力成熟度实际上靠近必要级，我国数据主权安全能力成熟度达到充分级。进一步提升我国数据主权安全能力成熟度，宜从数据域外管辖的“文化教育”和数据本地存储、数据跨境流动的“技术工具”展开，尤其要重视在域外司法活动之中及时运用《数据安全法》的长臂管辖，以及引导和推广在国内网络生态系统中应用自主技术产品。

关键词：DSSCMM;数据主权安全;能力成熟度;边际取样法;样本赋分法

中图分类号：G203   文献标识码：A   DOI：10.11968/tsyqb.1003-6938.2021055

Research on the Maturity Evaluation of Data Sovereignty Security Capability in China Based on DSSCMM

——Discussion on the Evaluation Process and Method of DSSCMM

Abstract Based on DSSCMM， this paper puts forward the method and process of evaluating the maturity of data sovereignty security capability ， and puts forward some suggestions to improve the weakness of our country's data sovereignty security capability.Construct and use marginal sampling method to determine effective samples， apply expert investigation method to determine the weight of capability dimension， and use sample scoring method to calculate the scores of capability dimensions， then determine the key process area score and data sovereignty security capability score.The capacity maturity of data localization， cross-border data flow and data extraterritorial jurisdiction has reached a higher level， but the capacity maturity of data extraterritorial jurisdiction actually tends to be necessary level， and the data sovereignty security capacity maturity of our country has reached a sufficient level.In order to improve the maturity of our country's data sovereignty security capability， it is suggested that we should start from "culture and education" and "technical tools" of data local storage and data cross-border flow.Particular attention shall be paid to the timely application of the long-arm jurisdiction of the Data Security Law in extraterritorial judicial activities， and guide and promote the application of independent technology products in the domestic network ecosystem.

Key words DSSCMM; data sovereignty security; capability maturity; marginal sampling method; sample scoring method

1   引言

步入數字化时代、智能化社会以后，网络空间成为大国博弈的主要战场。网络空间的安全关系到各国的主权利益，由此网络主权概念应运而生，被认为是领土、领海、领空等传统主权之后的新型主权，但它们的共同点仍然在于基于空间意象而形成的主权观念。数据被中央文件定位为生产要素之后，其已经从原来的技术生产要素中独立出来，其重要性不言而喻。数据是网络空间基本的传输载体，其也被上升到主权的高度——数据主权观念逐渐形成。……