CMMI Institute

« Appraisal Overview

Beijing Changyang Software Co.,Ltd. (北京长扬软件有限公司)

R&D Center (研发中心)

Appraisal Details

Organization

Beijing Changyang Software Co.,Ltd. (北京长扬软件有限公司)

Organizational Unit

R&D Center (研发中心)

Appraisal Team Leader

Qiushi Yang

Partner

Shenzhen Huasai Information Consulting

Sponsors

Ning Xu

Appraisal Type

Benchmark

Last day On-site

2023/12/22

Appraisal Expiration Date

2026/12/22


R&D Center Project Description

Organizational Unit

R&D Center

Domain

CMMI Development - Maturity Level - 3

Sample Size - People

97.6%

Sample Size - Projects

100%


Project Name

*Sensitive

Project Type

Organizational Project

Project Description

*Sensitive

Number of People

2

Location

Subgroup


Project Name

*Sensitive

Project Type

Organizational Project

Project Description

*Sensitive

Number of People

2

Location

Subgroup


Project Name

*Sensitive

Project Type

Organizational Project

Project Description

*Sensitive

Number of People

4

Location

Subgroup


Project Name

*Sensitive

Project Type

Organizational Project

Project Description

*Sensitive

Number of People

2

Location

Subgroup


Project Name

*Sensitive

Project Type

Organizational Project

Project Description

*Sensitive

Number of People

6

Location

Subgroup


Project Name

*Sensitive

Project Type

OU Project

Project Description

*Sensitive

Number of People

6

Location

Subgroup

Industry project development


Project Name

*Sensitive

Project Type

OU Project

Project Description

*Sensitive

Number of People

7

Location

Subgroup

Industry project development


Project Name

*Sensitive

Project Type

OU Project

Project Description

*Sensitive

Number of People

6

Location

Subgroup

Customized project development


Project Name

*Sensitive

Project Type

OU Project

Project Description

*Sensitive

Number of People

4

Location

Subgroup

Customized project development


OU Description

This OU was registered and established on February 20, 2023, based on the general direction of letter creation, adhere to the concept of independent innovation, focus on the basic software security field of industrial control industry, deeply cultivate the customized development of industry operating system security, and focus on the main technical approach of "security and password". Carry out research on trusted computing technology, access control technology, virtualization security, network security, system security, data security and other related technologies, achieve the core competitiveness of independent technology innovation, create a series of industrial security operating system products in the field of industrial control, and carry out the migration adaptation, reconstruction, independent research and development of Xinchuan products and the design and implementation of security solutions. The OU products and solutions can be widely used in the party and government, power, coal, tobacco, petroleum and petrochemical, rail transit, intelligent manufacturing, national defense, iron and steel metallurgy and communications and other industries, to meet the requirements of isoassurance 2.0 and critical information infrastructure security protection regulations. 这个OU于2023年2月20日注册成立,立足信创大方向,坚持自主创新理念,聚焦工控行业基础软件安全领域,深耕行业操作系统安全定制开发,着力于“安全与密码”主要技术途径,开展可信计算技术、访问控制技术、虚拟化安全、网络安全、系统安全及数据安全等相关技术研究,实现技术自主创新核心竞争力,打造工控领域行业安全操作系统系列产品,同时开展信创产品的迁移适配、重构、独立研发及安全解决方案设计与实现。 该OU产品及解决方案可广泛应用于党政、电力、煤矿、烟草、石油石化、轨道交通、智能制造、国防军工、钢铁冶金和通信等行业,满足等保2.0及关键信息基础设施安全保护条例要求。

Relevant Sampling Factors

Type of Work: The OU's products are mainly concentrated in security management service platforms and systems, and its project research and development is still divided into two categories. One is industry project development, and the other is customized project development. Industry project development: Combined with the industry and the Ministry of Industry and Information Technology standards, to provide the industry with a safety management system platform. This type of platform is mainly aimed at user groups and enterprises in the industry. Customized project development: Different from Industry project development, customized project development is more based on the actual needs of customers to develop the corresponding security management system. The relevant system is directly applied to the actual operating environment of customers, and can add relevant functional modules on the basis of the core architecture according to customer requirements to achieve the purpose of meeting customer requirements. 该OU的产品主要都集中在安全管理类服务平台以及系统,其项目研发仍然被区分为了两个种类。 一种是行业类项目研发,另外一种是客户定制化开发。 行业类项目研发: 结合行业以及工信部标准规范,为行业提供安全管理系统平台。这类型平台主要针对的是行业内的用户群体以及企业。 客户定制化开发: 有别于行业类项目研发,客户定制研发更加基于客户实际需求场景来开发对应的安全管理系统。 相关系统直接应用于客户的实际操作环境中,并可以根据客户的要求来在核心架构的基础上新增相关功能性模块以便达到满足客户要求的目的。

Sampling Factor Values

Industry project development: Mainly for the implementation and development of the industry, to provide industry-specific solutions, applied to various types of enterprises in the industry field. Provide one-stop security management service capabilities for a period of time, and continue to optimize and iterate. 主要针对行业而实施开发,提供行业化的解决方案,应用于该行业领域内的各类型企业。为期提供一站式的安全管理服务能力,并持续优化和迭代。

Customized project development: Mainly for user groups and enterprises with special customer scenario requirements, this type of project generally has unique characteristics, and will be customized according to the actual business operation scenario of the customer to ensure that the actual operation of the customer as much as possible. 主要针对有特殊客户场景需求的用户群体和企业,这类型项目一般具有独特性的特征,会根据客户的实际业务操作场景来实施定制化开发,确保尽可能的吻合客户的实际操作。

Subgroups

Customized project development

Industry project development


Domains

Development

Maturity Level

3
CAR
Satisfied
CM
Satisfied
DAR
Satisfied
EST
Satisfied
GOV
Satisfied
II
Satisfied
MC
Satisfied
MPM
Satisfied
OT
Satisfied
PAD
Satisfied
PCM
Satisfied
PI
Satisfied
PLAN
Satisfied
PQA
Satisfied
PR
Satisfied
RDM
Satisfied
RSK
Satisfied
TS
Satisfied
VV
Satisfied