关键词: 数据安全;数据安全复合治理;数据安全战略, 数据安全运营管理;数据安全治理科技, 多视角安全度量, 量化评价, 持续优化

Abstract: With the formal implementation of the “Data Security Law of the People’s Republic of China”, the significance of data security governance has received more and more recognition. Firstly, this article performs a thorough study on the current status and challenges of data security governance. Based on the outputs, this article presents a new data security governance framework, i.e., the Data Security Composite Governance, which can be accurately quantified and sustainably improved along with its implementation. Brief illustrations of the fundamental framework and core concept of data security composite governance are presented, focusing on its basic components, i.e., data security strategy, data security operational management and data security governance technology. Certain instructions on how to build up the data security composite governance from scratch are also provided, which aim to bring inspiring ideas and thoughts for implementing data security governance inside an organization.

Key words: data security, data security composite governance, data security strategy, data security operational management, data security governance technology, multi-angle security metric, quantitative evaluation, sustainable improvement