The National Information Security Standardization Technical Committee (TC260) and the National Standardization Management Committee have implemented the "Information Security Technology Data Security Capability Maturity Model" (DSMM) as a national standard. The DSMM aims to help companies to discover data security problems and develop response strategies on four dimensions: organizational construction, system processes, technical tools, and personnel capabilities.
Original source