What are the DCMM assessment process and audit points?

Mondo Three rural Updated on 2024-02-29

GB T 36073-2018 Data Management Capability Maturity Assessment Model (DCMM) is the first national standard officially released in the field of data management in China. Under the guidance of the Ministry of Industry and Information Technology and the Electronic Information Industry Federation, Tongbang Information Technology Co., Ltd. provides enterprises with DCMM standard implementation evaluation services, uses advanced data management concepts and methods to help customers establish and evaluate their own data management capabilities, continuously improves data management organizations, procedures and systems, and gives full play to the value of data in the development of enterprise informatization, digitalization and intelligence.

1. Evaluation process

According to the actual situation of the enterprise, the evaluation agency guides the determination of the DCMM assessment level target. Through the evaluation application, assessment preparation, formal evaluation, result evaluation and other stages, improve the level of data management and meet the evaluation requirements. The specific process is as follows:

Fig.1 Workflow diagram of DCMM implementation evaluation.

(1) Assessment of applications(1) Pre-sales communication

Communicate the assessment needs, study and judge the application conditions of the enterprise, and determine the evaluation level.

(2) Signing for the record

Sign the evaluation contract, guide the enterprise to fill in the evaluation application, and sign the contract with the China Electronic Information Industry Federation for the record.

Figure 2 Signing and filing on the official website of China Electronic Information Industry Federation.

(2) Preparation for assessment(1) Project start-up

Evaluation planning: Formulate DCMM evaluation plan and implementation plan.

Project kick-off meeting: Officially launch the project, clarify the evaluation methods and processes, interview and research arrangements, assign the leaders of each evaluation preparation team and relevant participants, and establish an evaluation work guarantee and organizational communication mechanism.

DCMM Standard Interpretation Training: Publicize and implement the core content of the 8 major competency domains and 28 competency items of the DCMM national standard, and interpret the requirements of the clauses.

(2) Standard implementation research

Data preparation: According to the list of supporting materials provided by the evaluation agency and the requirements for standard implementation, the enterprise shall organize and prepare the supporting materials corresponding to the standard clauses.

Investigation of the current situation: Carry out on-site research through data inspection, personnel interviews, tool platform audits, etc., collect supporting materials and record them, and form the results of the current situation investigation.

(3) Capacity building

Gap analysis: According to the survey results, analyze the gap between the current situation of the enterprise and the target level in detail, and summarize the ability improvement points based on the actual situation.

Capacity improvement: The evaluation agency continues to guide the enterprise to improve, and the standard-implementing enterprise establishes and improves the data management system according to the improvement suggestions and reference materials, combines its own situation, optimizes the strategy, system, organization, personnel, tools and other aspects, and supplements and improves the activity records and supporting documents.

(3) Formal assessment(1) Carry out on-site assessments

The company submits all supporting materials and formally conducts the on-site assessment. In accordance with all the evaluation requirements in the DCMM standard, the evaluation team conducted a detailed examination of the supporting materials and interviewed the relevant responsible persons.

(2) Writing of evaluation reports

After the on-site assessment is completed, the evaluation agency will sort out and summarize the supporting materials and assessment results, form an assessment score, and prepare an evaluation report and submit it to the China Electronic Information Industry Federation for review.

(4) Outcome review(1) Prepare review materials

The assessment level below level 2 is only for filing and review, and the grade ** and above need to be reviewed on site. The evaluation agency and the standard-implementing enterprise shall prepare the defense report materials, and arrange the relevant personnel of the project to prepare for the defense.

(2) Participate in the on-site review

The China Electronic Information Industry Federation organized experts to comment on the report. The evaluation experts will ask questions based on the assessment report and reporting materials, and the evaluation agency and the standard implementation enterprise will answer on the spot.

(3) Announcement of results

The China Electronic Information Industry Federation will announce the results on the official day and officially release the DCMM certificate. The assessment body delivers the assessment report. In the China Electronic Information Industry Federation, the official ** can be publicly inquired.

Figure 3 Certificate publicity query on the official website of China Electronic Information Industry Federation.

2. Key points of application

(1) The type of application

DCMM is an evaluation framework for enterprise data management and application capabilities, and the standard is applicable to both Party A and Party B.

Party A (Data Owner).: Evaluate the enterprise's own data management and application capabilities. For example, enterprises that own and use big data such as banking, energy, and communications.

Party B (is an information technology service provider).: Evaluate the data management and application capabilities of the products and services provided by the enterprise. Such as data management middle office technology providers, data management technology solution providers.

(2) Application levelDCMM divides the maturity level of data management capabilities into five levels, from low to high: initial level (level 1), managed level (level 2), robust level (level 3), quantitative management level (level 4), and optimization level (level 5).

Enterprises can choose the appropriate type and grade to apply for assessment according to their actual situation.

Figure 4 DCMM evaluation grade.

(3) Application requirements for Party A's enterprise (data owner).

(4) Party B's enterprise (information technology service provider) application requirements

Related Pages