构建数据主权安全能力成熟度模型，用于评价国家的数据主权安全能力状况针对薄弱环节提出改进策略，为今后制定相关标准提供智力支持。以能力成熟度模型的标准和相关研究成果为基础，运用层次分析法，确定模型的三维结构，识别关键过程域，构建能力维度，进而划定成熟度等级。数据主权安全能力成熟度模型由“数据本地存储”“数据跨境流动”和“数据域外管辖”3个关键过程域，“文化教育”“技术工具”“政策战略”“组织建设”和“立法司法”5项能力维度，以及“初始级”“发展级”“必要级”“充分级”和“优化级”5级成熟度共同构成。其中，能力维度包括19种构成要素，其是描述能力成熟度等级所要求的29个关键实践的基础。

This Paper aims to build a maturity model of data sovereignty security capability for evaluating the state of a country’s data sovereignty security capability and proposing improvement strategies for weak links, so as to provide intellectual support for the formulation of relevant standards in the future. Based on the standards of the capability maturity model and related research results, the three-dimensional structure of the model, with the analytic hierarchy process, is determined, the key process areas are identified, the capability dimension is constructed, and the maturity level is determined. The study found that the maturity model of data sovereignty security capability consists of three key process areas, namely, "local data storage", "cross-border data flow" and "extraterritorial jurisdiction of data", five capability dimensions , namely, "cultural education", "technical tools", "policy strategies", "organizational construction", and "legislation and judiciary", and five maturity levels, namely, "initial level", "development level", "necessary level", "sufficiency level" and "optimization level". In which the capability dimension includes 19 components, which are the basis for describing the 29 key practices required by the capability maturity level.