{"text_format":"1","workbook":"xlsx","n_sheets":5,"sheets":["封面","检查表","改善计划书","改善计划书　填写范例","set_list"],"not_rendered":{"charts":0,"images":1,"macros":1,"external_links":0,"defined_names":18,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"封面","index":0,"n_rows":38,"n_cols":21,"rows_kept":38,"cut":false,"hidden":true,"merged":[[2,5,2,13],[31,1,31,6],[32,1,32,6],[15,16,15,19],[18,7,18,12],[14,14,14,15],[10,14,10,25],[14,7,14,12],[15,7,15,12],[15,1,15,6],[13,1,13,6],[14,1,14,6],[14,20,14,25],[11,20,11,25],[18,14,18,25],[12,20,12,25],[1,22,1,25],[2,22,2,25],[3,22,3,25],[4,22,4,25],[1,19,1,21],[2,19,2,21],[3,19,3,21],[4,19,4,21],[36,1,36,6],[30,1,30,6],[34,1,34,6],[37,1,37,6],[37,7,37,12],[35,1,35,6],[13,20,13,25],[15,20,15,25],[14,16,14,19],[25,1,25,4],[30,7,30,9],[26,5,26,6],[26,1,26,4],[27,5,27,6],[27,1,27,4],[34,14,34,25],[19,14,33,25],[25,7,25,12],[27,7,27,12],[26,7,26,12],[29,1,29,12],[35,14,37,25],[25,5,25,6],[11,14,11,15],[11,16,11,19],[13,16,13,19],[12,16,12,19],[12,14,12,15],[13,14,13,15],[19,1,19,6],[13,7,13,12],[15,14,15,15],[18,1,18,6],[33,1,33,6],[19,7,19,12],[20,7,20,12],[20,1,20,6]]}
[]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"最终认可"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"日期 :"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"认可"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"日期 :"]
[]
[]
[]
[]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,"自主检查的实施方"]
[null,null,"：是需要交易对方填写的栏目。",null,null,null,null,null,null,null,null,null,null,null,null,null,"部门名称",null,null,null,"姓名"]
[null,"采购交易对方编码（仅限有时填写。）",null,null,null,null,null,null,null,null,null,null,null,null,"代表者"]
[null,"公司名称"]
[null," G-Code（采购交易对方编码）"]
[null,"Company设定的交易对方编码（仅限有时填写）"]
[]
[null,"交易内容："]
[null,"内容",null,null,null,null,null,"代表商品名称",null,null,null,null,null,null,"结果评语"]
[]
[]
[]
[null,"认证取得："]
[null,"请填写所取得的信息安全、个人信息保护相关的认证。"]
[]
[null,"认证名称",null,null,null,"取得日期",null,"认证机关名称"]
[null,"ISO27001"]
[]
[]
[null," 结 果（评价分数）"]
[null,"　",null,null,null,null,null,"评分",null,null,"是","否","对象外"]
[null,"１．信息安全管理体制的确立",null,null,null,null,null,{"$f":"SUM(检查表!J17:J18)","v":0},{"$f":"SUM(检查表!K17:K18)","v":6},{"$f":"H32/I32","v":0},{"$f":"COUNTIF(检查表!H17:H18,hai)","v":0},{"$f":"COUNTIF(检查表!H17:H18,iie)","v":0},{"$f":"COUNTIF(检查表!H17:H18,na)","v":0}]
[null,"２．信息资产的机密管理",null,null,null,null,null,{"$f":"SUM(检查表!J20:J90)","v":0},{"$f":"SUM(检查表!K20:K90)","v":70},{"$f":"H33/I33","v":0},{"$f":"COUNTIF(检查表!H20:H90,hai)","v":0},{"$f":"COUNTIF(检查表!H20:H90,iie)","v":0},{"$f":"COUNTIF(检查表!H20:H90,na)","v":0}]
[null,"３．人的对策",null,null,null,null,null,{"$f":"SUM(检查表!J92:J97)","v":0},{"$f":"SUM(检查表!K92:K97)","v":12},{"$f":"H34/I34","v":0},{"$f":"COUNTIF(检查表!H92:H97,hai)","v":0},{"$f":"COUNTIF(检查表!H92:H97,iie)","v":0},{"$f":"COUNTIF(检查表!H92:H97,na)","v":0}]
[null,"４．信息安全事件/事故处理",null,null,null,null,null,{"$f":"SUM(检查表!J99:J109)","v":0},{"$f":"SUM(检查表!K99:K109)","v":6},{"$f":"H35/I35","v":0},{"$f":"COUNTIF(检查表!H99:H109,hai)","v":0},{"$f":"COUNTIF(检查表!H99:H109,iie)","v":0},{"$f":"COUNTIF(检查表!H99:H109,na)","v":0},null,"松下填写栏目"]
[null,"５．信息安全管理的实施",null,null,null,null,null,{"$f":"SUM(检查表!J111:J112)","v":0},{"$f":"SUM(检查表!K111:K112)","v":6},{"$f":"H36/I36","v":0},{"$f":"COUNTIF(检查表!H111:H112,hai)","v":0},{"$f":"COUNTIF(检查表!H111:H112,iie)","v":0},{"$f":"COUNTIF(检查表!H111:H112,na)","v":0}]
[null,"综合得分",null,null,null,null,null,{"$f":"SUM(H32:H36)","v":0},{"$f":"SUM(I32:I36)","v":100},{"$f":"H37*100/I37","v":0},{"$f":"SUM(K32:K36)","v":0},{"$f":"SUM(L32:L36)","v":0},{"$f":"SUM(M32:M36)","v":0}]
[null,{"$f":"IF(H38=mikinyu,ari)","v":"检查表上有"},null,null,null,null,null,{"$f":"VLOOKUP(mikinyu,检查表!J17:J112,1,0)","v":"未填写项"}]

{"sheet":"检查表","index":1,"n_rows":113,"n_cols":12,"rows_kept":113,"cut":false,"hidden":false,"merged":[[0,0,0,7],[15,1,15,7],[18,1,18,7],[16,1,16,2],[10,1,10,2],[11,1,11,2],[12,1,12,2],[5,1,5,4],[6,1,6,4],[7,5,7,6],[8,5,8,6],[9,5,9,6],[7,1,7,4],[8,1,8,4],[9,1,9,4],[10,5,10,6],[11,5,11,6],[12,5,12,6],[2,7,2,9],[2,5,2,6],[3,5,3,6],[3,7,3,9],[23,9,27,9],[56,10,57,10],[23,8,27,8],[23,5,27,5],[23,6,27,6],[23,7,27,7],[28,6,32,6],[28,7,32,7],[56,7,57,7],[23,10,27,10],[37,10,39,10],[37,7,39,7],[37,6,39,6],[46,7,49,7],[28,8,32,8],[46,6,49,6],[46,8,49,8],[37,8,39,8],[28,9,32,9],[28,10,32,10],[46,10,49,10],[23,3,27,3],[28,3,32,3],[52,2,53,2],[72,3,84,3],[71,5,89,5],[58,3,60,3],[61,3,65,3],[41,3,45,3],[28,5,32,5],[41,5,70,5],[58,10,60,10],[41,8,45,8],[56,9,57,9],[46,9,49,9],[37,9,39,9],[61,10,65,10],[61,6,65,6],[61,7,65,7],[61,8,65,8],[61,9,65,9],[58,9,60,9],[56,6,57,6],[41,10,45,10],[41,9,45,9],[102,10,108,10],[72,10,84,10],[72,6,84,6],[72,7,84,7],[72,8,84,8],[98,8,101,8],[98,7,101,7],[98,9,101,9],[102,9,108,9],[72,9,84,9],[97,1,97,7],[71,2,72,2],[98,10,101,10],[90,1,90,7],[110,1,110,2],[102,7,108,7],[102,3,108,3],[112,0,112,4],[102,5,108,5],[109,1,109,7],[102,6,108,6],[37,3,39,3],[102,8,108,8],[37,5,39,5],[41,6,45,6],[41,7,45,7],[58,6,60,6],[98,6,101,6],[98,5,101,5],[98,3,101,3],[56,8,57,8],[58,7,60,7],[58,8,60,8],[56,3,57,3],[46,3,49,3]]}
["交易对方用信息安全基准检查表（Ver2.1）"]
[]
[null,"・下述对贵公司的信息安全实施状况的提问，请从答案选项栏的「是、否」中选择符合的答案。",null,null,null,"公司名称",null,{"$f":"IF(封面!H14=\"\",\"\",封面!H14)","v":""}]
[null,"・可以选择无该当对象（N/A）的问题中，请选择答案选项栏中的「N/A」后，在备注栏里填写选择N/A的理由。",null,null,null,"日期"]
[null,"・本检查表中的「机密信息」是指、与本公司共享的机密信息以及利用该信息创造出的机密信息。（详细请参照 交易对方用信息安全基准　Ⅲ 2．）"]
[null,"・下表中的事项,可以实行《N/A选项的统一设定》，请选择该事项后的「该当」，然后点击确认按键即可。（需要个别设定时，请不要选择「该当」，而是直接从下述答案栏选择即可。）"]
[null,"　（注意事项）利用下表无法将已设定的「N/A」选项进行统一解除。统一设定后想要解除时，首先将「该当」取消并点击确认后，再在想要解除项的答案栏的下拉菜单里进行个别变更。"]
[null,null,null,null,null,"无复制/复写"]
[null,null,null,null,null,"无带出"]
[null,null,null,null,null,"无纸质/化体品信息"]
[null,null,null,null,null,"无电子化信息"]
[null,null,null,null,null,"无委托"]
[null,null,null,null,null,"无派遣员工"]
[]
[null,null,null,"编号","提问","N/A条件","比分","答案","备注\n选择N/A的理由","得分","配点"]
[1,"信息安全管理体制的确立"]
[null,"信息安全管理体制的确立",null,"1-1","构建了信息安全管理的组织体制、明确其责任和职责、并实行文档化了吗。","必须",3,null,null,{"$f":"+IF(H17=hai,G17,IF(H17=iie,0,IF(H17=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H17=na,0,G17)","v":3},"あ\nあ"]
[null,null,null,"1-2","制定信息安全工作相关的基本思想(方针)及规则、并实行文档化了吗。","必须",3,null,null,{"$f":"+IF(H18=hai,G18,IF(H18=iie,0,IF(H18=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H18=na,0,G18)","v":3},"あ\nあ"]
[2,"信息资产的机密管理",null,null,null,null,null,null,null,null,null,"あ\nあ"]
[null,"(1)","机密信息的明确化","2-1-1","制作机密信息的资产清单以特定资产，并定期更新该资产清单了吗。","必须",2,null,null,{"$f":"+IF(H20=hai,G20,IF(H20=iie,0,IF(H20=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H20=na,0,G20)","v":2},"あ\nあ"]
[null,null,null,"2-1-2","按照合同要求对机密信息进行复制/复写时，对复制/复写件也实施与机密信息原件等同的安全管理了吗。","无复制/复写",2,null,null,{"$f":"+IF(H21=hai,G21,IF(H21=iie,0,IF(H21=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H21=na,0,G21)","v":2},"あ\nあ"]
[null,null,null,"2-1-3","将机密信息与除此之外的信息明确区分并实行管理了吗。","必须",2,null,null,{"$f":"+IF(H22=hai,G22,IF(H22=iie,0,IF(H22=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H22=na,0,G22)","v":2},"あ\nあ"]
[null,"(2)","机密信息的交换/归还管理","2-2-1","是依据与本公司协商一致的规则进行机密信息的交换吗。","必须",2,null,null,{"$f":"+IF(H23=hai,G23,IF(H23=iie,0,IF(H23=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H23=na,0,G23)","v":2},"あ\nあ"]
[null,null,null,"2-2-2","制定带出机密信息的规则，并实施下述a)-d)的所有要求事项了吗。","无带出",2,null,null,{"$f":"+IF(H24=hai,G24,IF(H24=iie,0,IF(H24=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H24=na,0,G24)","v":2},"あ\nあ"]
[null,null,null,null,"　　a) 带出机密信息时，取得管理责任人的许可。",null,null,null,null,null,null,"あ\nあ"]
[null,null,null,null,"　　b) 带出过程中，务必将机密信息常时随身携带，不得远离自己的视线。",null,null,null,null,null,null,"あ\nあ"]
[null,null,null,null,"　　c) 将机密信息保管到电脑/便携信息终端/记忆媒体里带出、或者是用电子邮件附加发送时，务必要实施加密。",null,null,null,null,null,null,"あ\nあ"]
[null,null,null,null,"　　d) 带出化体品(模具/试制品等)时，采取遮盖措施避免让外部人员看到。",null,null,null,null,null,null,"あ\nあ"]
[null,null,null,"2-2-3","当受本公司委托的业务结束后，是按照与本公司协商一致的流程归还机密信息的吗。如果是在贵公司废弃机密信息时，是按照经本公司同意的方法，实施下述a)-d)的所有该当要求事项了吗。并按照本公司的要求，提供该废弃记录了吗。","必须",2,null,null,{"$f":"+IF(H29=hai,G29,IF(H29=iie,0,IF(H29=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H29=na,0,G29)","v":2},"あ\nあ"]
[null,null,null,null,"　　a) 如果是电子化信息时，请将服务器、电脑、便携信息终端、记忆媒体等里保管的机密信息全部删除。",null,null,null,null,null,{"$f":"+IF(H30=\"N/A\",0,G30)","v":0},"あ\nあ"]
[null,null,null,null,"　　b) 如果是纸质信息 (文件/图纸等)，用碎纸机裁剪、溶解或焚烧。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　c) 如果是化体品(模具/试制品等)，破坏至无法读取原信息。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　d) 如果向专业废弃物处理公司等外部公司委托废弃时，与该委托对象签订保密合同。",null,null,null,null,null,0,"あ\nあ"]
[null,"(3)","物理性管理","2-3-1","为限制无关人员随便进入处理机密信息的场所(公司厂房用地/建筑物/房间内)，采取相关的物理性对策了吗。","必须",2,null,null,{"$f":"+IF(H34=hai,G34,IF(H34=iie,0,IF(H34=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H34=na,0,G34)","v":2},"あ\nあ"]
[null,null,null,"2-3-2","处理机密信息的场所仅限业务上有必要的人员方可进入，而且取得管理责任人的许可了吗。","必须",2,null,null,{"$f":"+IF(H35=hai,G35,IF(H35=iie,0,IF(H35=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H35=na,0,G35)","v":2},"あ\nあ"]
[null,null,null,"2-3-3","确立能够在公司里区别员工和外部来访人员的体制了吗。","必须",2,null,null,{"$f":"+IF(H36=hai,G36,IF(H36=iie,0,IF(H36=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H36=na,0,G36)","v":2},"あ\nあ"]
[null,null,null,"2-3-4","对处理机密信息的场所的进出，取得进出房间的双向记录或者单向记录(包括监视摄像机图像)，并定期对该记录的正确取得进行确认了吗。","必须",2,null,null,{"$f":"+IF(H37=hai,G37,IF(H37=iie,0,IF(H37=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H37=na,0,G37)","v":2},"あ\nあ"]
[null,null,null,"2-3-5","在处理机密信息的场所，禁止带入个人所有的电脑、手机、便携信息终端、记忆媒体(SD卡、USB媒体等)、通信设备(无线LAN等)等。如果需要带入时，请实施下述a)及 b)的要求事项。","必须",2,null,null,{"$f":"+IF(H38=hai,G38,IF(H38=iie,0,IF(H38=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H38=na,0,G38)","v":2},"あ\nあ"]
[null,null,null,null,"　　a) 需要带入时，事前取得管理责任人的许可。",null,null,null,null,null,{"$f":"+IF(H39=\"N/A\",0,G39)","v":0},"あ\nあ"]
[null,null,null,null,"　　b) 即使允许带入时，也须制定禁止连接公司电脑或公司内部网络、禁止使用手机、便携信息终端的照相功能等相关规则，以实施合理管理。",null,null,null,null,null,{"$f":"+IF(H40=\"N/A\",0,G40)","v":0},"あ\nあ"]
[null,null,null,"2-3-6","针对纸质信息(文件/图纸等)/化体品(模具/试制品等)，是仅限业务上有必要获知信息的人员可处理，并实施防盗对策了吗。","无纸质/化体品",2,null,null,{"$f":"+IF(H41=hai,G41,IF(H41=iie,0,IF(H41=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H41=na,0,G41)","v":2},"あ\nあ"]
[null,"(4)","信息系统用户ID和密码的管理","2-4-1","制定信息系统的用户ID管理规则，并实施下述a)-d)的所有要求事项了吗。","无电子化信息",2,null,null,{"$f":"+IF(H42=hai,G42,IF(H42=iie,0,IF(H42=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H42=na,0,G42)","v":2},"あ\nあ"]
[null,null,null,null,"　　a)  采取相关措施制止信息系统用户与其他用户共享ID。",null,null,null,null,null,{"$f":"+IF(H43=\"N/A\",0,G43)","v":0},"あ\nあ"]
[null,null,null,null,"　　b)  制定信息系统的用户ID发行流程和认可流程。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　  c)  由于离职或调动等与相关业务无关人员的ID、以及临时性使用的ID等不再需要的ID，需及时删除。",null,null,null,null,null,null,"あ\nあ"]
[null,null,null,null,"　  d)  定期实施确认，确保不存在未管理的ID。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,"2-4-2","制定密码的管理规则，实施下述a)-c)的所有要求事项了吗。",null,2,null,null,{"$f":"+IF(H47=hai,G47,IF(H47=iie,0,IF(H47=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H47=na,0,G47)","v":2},"あ\nあ"]
[null,null,null,null,"　  a) 密码必须设定成他人难以推测的形式。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　b) 密码必须定期变更。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　c) 密码必须实行保密性管理，不得让他人随意获知。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,"2-4-3","对保管了机密信息的服务器实行访问限制，仅限业务上有必要获知信息的人员方可访问，确立了相关限制体制了吗。",null,2,null,null,{"$f":"+IF(H51=hai,G51,IF(H51=iie,0,IF(H51=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H51=na,0,G51)","v":2},"あ\nあ"]
[null,null,null,"2-4-4","取得访问机密信息的人员的记录(日志)，并在与本公司协商一致的期间内进行合理保管了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,"(5)","电脑/服务器等信息系统的设置/运用以及废弃的管理","2-5-1","将公司内部网络通过路由器、防火墙等实行与公司外部网络(因特网)分离了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"2-5-2","制定引进/设置电脑、便携信息终端、服务器时的具体规则，并加以实施了吗。  ",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"2-5-3","机密信息保管在服务器里、服务器实施合理的安全管理了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"2-5-4","采取措施制止个人所有电脑、个人用便携信息终端、及个人所有记忆媒体用于业务之上了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"2-5-5","制定包含下述内容在内的电脑、服务器、便携信息终端、记忆媒体的废弃和再使用规则，并加以实施了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,null,"　   ・为防止原数据被还原，制定彻底删除硬盘内的信息或物理性毁坏硬盘的规则了吗。",null,null,null,null,null,{"$f":"+IF(H58=\"N/A\",0,G58)","v":0},"あ\nあ"]
[null,null,null,"2-5-6","保管了机密信息的服务器，设置到可以确保安全的合理场所，并实施下述a)及b)的要求事项了吗。",null,2,null,null,{"$f":"+IF(H59=hai,G59,IF(H59=iie,0,IF(H59=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H59=na,0,G59)","v":2},"あ\nあ"]
[null,null,null,null,"　   a) 对服务器的设置场所的进出，仅限业务上有必要的人员。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　   b) 对服务器实施防盗对策。",null,null,null,null,null,0,"あ\nあ"]
[null,"(6)","非法程序对策","2-6-1","制定防电脑病毒和非法程序的相关对策，并实施下述a)-d)的所有要求事项了吗。",null,2,null,null,{"$f":"+IF(H62=hai,G62,IF(H62=iie,0,IF(H62=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H62=na,0,G62)","v":2},"あ\nあ"]
[null,null,null,null,"　　a) 引进系统管理责任人指定的防病毒软件（种类/版本等）。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　b) 在电脑中安装防病毒软件、使其处于常时运作且可防御病毒的状态 。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　c) 定期更新病毒定义文件。 ",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　d) 对于保管的所有文件，定期实行病毒扫描。",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,"2-6-2","制定能够将病毒危害控制于最小限度的对策流程(感染病毒时的物理性处理方法或报告/通知/处理方法等)，并加以实施了吗。",null,2,null,null,{"$f":"+IF(H67=hai,G67,IF(H67=iie,0,IF(H67=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H67=na,0,G67)","v":2},"あ\nあ"]
[null,null,null,"2-6-3","禁止安装/使用文件交换软件（Winny·Share等信息泄漏风险较高的软件），并实行定期确认了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"2-6-4","禁止通过免费邮件(Yahoo邮件等)及数据共享服务（Google docs等）实行机密信息的发送/共享了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,"(7)","备份的实施","2-7-1","针对备份的必要性/频率，经与本公司研讨决定需要取得备份时，制定电子化机密信息的备份规则，并加以实施了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"2-7-2","制定备份数据的保管规则，并按照机密区分实施合理管理了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,"(8)","与贵公司共享机密信息的委托对象的管理\n（对于本公司属二次委托对象）","2-8-1","贵公司与委托对象共享机密信息时，实行在事前书面通知本公司该事实了吗。","无委托\n（对于本公司属于二次委托）",2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"2-8-2","与和贵公司共享机密信息的委托对象签订包括下述a)-l)条款在内的保密合同（或者是包括保密事项在内的合同），制定关于机密信息的处理及交换的规则，并加以实施了吗。",null,2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,null,"　　a) 保密义务",null,null,null,null,null,{"$f":"+IF(H74=\"N/A\",0,G74)","v":0},"あ\nあ"]
[null,null,null,null,"　　b) 成为保密对象的信息的范围",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　c) 保密义务期限(也包含无限期)　",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　d) 使用目的的限制　",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　e) 访问者应限定为在业务上有必要了解该信息的人员",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　f) 机密信息的管理方法",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　g) 机密信息的复制/复写的限制",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　h) 保密期限期满后的归还或废弃的规定",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　i) 保密相关事项确认（访谈和监查等）措施的规定",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　j) 违反合同时的措施（应加入损害赔偿、以及禁止市场流通、销售的条款等）",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"    k) 禁止擅自进行二次委托",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"    l) 禁止用个人所有电脑处理业务",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,"2-8-3","向与贵公司共享机密信息的委托对象发送电子化机密信息时，将该当文件实施加密了吗。",null,2,null,null,{"$f":"+IF(H86=hai,G86,IF(H86=iie,0,IF(H86=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H86=na,0,G86)","v":2},"あ\nあ"]
[null,null,null,"2-8-4","当贵公司与共享机密信息的委托对象之间实行机密信息的交换时，留取记录并实行管理了吗。",null,2,null,null,{"$f":"+IF(H87=hai,G87,IF(H87=iie,0,IF(H87=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H87=na,0,G87)","v":2},"あ\nあ"]
[null,null,null,"2-8-5","要求与贵公司共享机密信息的委托对象，向其员工取得与贵公司的员工相同的保密誓约书了吗 。",null,2,null,null,{"$f":"+IF(H88=hai,G88,IF(H88=iie,0,IF(H88=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H88=na,0,G88)","v":2},"あ\nあ"]
[null,null,null,"2-8-6","要求与贵公司共享机密信息的委托对象，实施与贵公司同等水平的信息安全管理，并定期对实际情况进行确认了吗 。",null,2,null,null,{"$f":"+IF(H89=hai,G89,IF(H89=iie,0,IF(H89=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H89=na,0,G89)","v":2},"あ\nあ"]
[null,null,null,"2-8-7","要求与贵公司共享机密信息的委托对象，对其员工实施信息安全教育了吗。",null,2,null,null,{"$f":"+IF(H90=hai,G90,IF(H90=iie,0,IF(H90=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H90=na,0,G90)","v":2},"あ\nあ"]
[3,"人的对策",null,null,null,null,null,null,null,null,null,"あ\nあ"]
[null,"(1)","信息安全的启蒙、教育和培训","3-1-1","对全体员工定期实施信息安全教育了吗。","必须",2,null,null,{"$f":"+IF(H92=hai,G92,IF(H92=iie,0,IF(H92=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H92=na,0,G92)","v":2},"あ\nあ"]
[null,null,null,"3-1-2","对管理责任人定期实施信息安全教育了吗。","必须",2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"3-1-3","要求全体员工实施自我点检，以定期确认信息安全相关规则的遵守状况了吗。如果存在不符合事项，管理责任人负责指示改善工作了吗。","必须",2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"3-1-4","面向全体员工实施目标型攻击的教育或培训了吗。","必须",2,null,null,"未填写项",2,"あ\nあ"]
[null,"(2)","向员工等取得保密誓约书","3-2-1","在就业规则中设定保密条款，并向员工取得保密誓约书了吗。","必须",2,null,null,"未填写项",2,"あ\nあ"]
[null,null,null,"3-2-2","如果任用派遣员工时，向其取得保密誓约书了吗。","无派遣员工",2,null,null,"未填写项",2,"あ\nあ"]
[4,"信息安全事件/事故处理",null,null,null,null,null,null,null,null,null,"あ\nあ"]
[null,"(1)","事故报告/处理体制的确立","4-1","选任发生事故时的联络/处理责任人，确立包含下述a)-c)的内容的事故报告体制了吗。","必须",3,null,null,{"$f":"+IF(H99=hai,G99,IF(H99=iie,0,IF(H99=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H99=na,0,G99)","v":3},"あ\nあ"]
[null,null,null,null,"     a) 发现了信息安全上的问题及有发生可能时，或者目击了事件/事故及其迹象时，请迅速向管理责任人报告 。",null,null,null,null,null,{"$f":"+IF(H100=\"N/A\",0,G100)","v":0},"あ\nあ"]
[null,null,null,null,"     b) 针对本公司信息，如果发生了上述问题，请在与本公司协商一致的时间内迅速向本公司报告 。",null,null,null,null,null,null,"あ\nあ"]
[null,null,null,null,"     c) 遭受目标型攻击致使本公司相关信息的设备感染病毒时、在与本公司协定的时间内向本公司报告。",null,null,null,null,null,0,"あ\nあ"]
[null,"(2)","事故处理流程的明确化","4-2","明确了包括下述a)-f)事项在内的信息安全事故处理流程，并在组织内彻底贯彻了吗。","必须",3,null,null,{"$f":"+IF(H103=hai,G103,IF(H103=iie,0,IF(H103=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H103=na,0,G103)","v":3},"あ\nあ"]
[null,null,null,null,"　　a) 把握受害状况和使受害影响最小化的紧急处理",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　b) 原因调查和暂定措施",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　c) 在泄露信息时，采取向相关第三方报告等、相关人员能够进行自卫和处理的措施",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　d) 必要时，广报处理，向相关政府机关报告",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　e) 事故的经过、处理经过的记录",null,null,null,null,null,0,"あ\nあ"]
[null,null,null,null,"　　f) 构建能实施防止再发生对策和彻底贯彻的体制",null,null,null,null,null,0,"あ\nあ"]
[5,"信息安全管理的实施",null,null,null,null,null,null,null,null,null,"あ\nあ"]
[null,"信息安全管理",null,"5-1","定期确认有组织性的信息安全推进工作的实施情况了吗。","必须",3,null,null,{"$f":"+IF(H111=hai,G111,IF(H111=iie,0,IF(H111=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H111=na,0,G111)","v":3},"あ\nあ"]
[null,null,null,"5-2","对于确认结果中明确标明的不符合事项，制定改善计划并实施改善了吗。","必须",3,null,null,{"$f":"+IF(H112=hai,G112,IF(H112=iie,0,IF(H112=na,na,mikinyu)))","v":"未填写项"},{"$f":"+IF(H112=na,0,G112)","v":3},"あ\nあ"]
["总   计",null,null,null,null,null,{"$f":"SUM(G111:G112,G99:G109,G92:G97,G20:G90,G17:G18)","v":100},{"$f":"J113*100/K113","v":0},null,{"$f":"SUM(J111:J112,J99:J109,J92:J97,J20:J90,J17:J18)","v":0},{"$f":"SUM(K111:K112,K99:K109,K92:K97,K20:K90,K17:K18)","v":100},"あ\nあ"]

{"sheet":"改善计划书","index":2,"n_rows":12,"n_cols":14,"rows_kept":12,"cut":false,"hidden":true,"merged":[[10,12,10,13],[5,2,5,3],[10,1,11,1],[2,6,2,7],[10,8,10,11],[10,2,10,4],[10,5,10,7],[3,6,3,7],[4,6,4,7],[5,6,5,7],[6,6,6,7]]}
[]
[null,"改善计划书 "]
[null,null,null,null,null,"公司名称"]
[null,null,null,null,null,"信息安全责任人",null,null,"印"]
[null,null,null,null,null,"　信息安全担当"]
[null,null,null,null,null,"作成日"]
[null,null,null,null,null,"修订日（最终）"]
[]
[]
[]
[null,"No.","改善必要项目",null,null,"改善案",null,null,"对策未完成时预测的威胁和影响",null,null,null,"完成确认"]
[null,null,"检查表编号","项目","现在的状况","内容","完了\n予定日","费用\n（任意填写）","影响范围\n（选择）","威胁的具体的内容\n(任意填写) ","対策未完で被害発生した場合の責任の所在","对策完成后实施的暂定措施（有的场合请填写）","完成日","实施内容"]

{"sheet":"改善计划书　填写范例","index":3,"n_rows":11,"n_cols":13,"rows_kept":11,"cut":false,"hidden":true,"merged":[[8,11,8,12],[1,6,1,7],[8,1,9,1],[8,2,8,4],[8,5,8,7],[8,8,8,10],[2,6,2,7],[6,6,6,7],[5,6,5,7],[4,6,4,7],[3,6,3,7],[6,2,6,3]]}
[]
[null,"改善计划书（填写范例）"]
[null,null,null,null,null,"公司名称"]
[null,null,null,null,null,"信息安全责任人",null,null,"印"]
[null,null,null,null,null,"　信息安全担当"]
[null,null,null,null,null,"作成日"]
[null,null,null,null,null,"修订日（最终）"]
[]
[null,"No.","改善必要项目",null,null,"改善案",null,null,"对策未完成时预测的威胁和影响",null,null,"完成确认"]
[null,null,"检查表编号","项目","现在的状况","内容","完了\n予定日","费用\n（任意填写）","影响范围\n（选择）","威胁的具体的内容\n(任意填写) ","对策完成后实施的暂定措施（有的场合请填写）","完成日","实施内容"]
[null,"1","2-3-1","物理性管理","本公司的持有ID卡的员工和派遣员工，随便可以进入任意的研究开发部门的房间，因此尚未达到机密信息仅限必要人员可以访问的状态。\n","全面更新研究开发部门全体的入退管理系统。","2011-10-01","2000万日元","３．全公司业绩","本公司/部门里的持有ID却与信息资产无关的人员，有可能随意访问办公室里的重要信息资产。","夜间或休息日用加固锁管理，上班时间里用Web相机做进出入的简单记录。","2011-12-10","更新入退管理系统，仅限事前登录人员可以进入，并确认该执行状况"]

{"sheet":"set_list","index":4,"n_rows":7,"n_cols":10,"rows_kept":7,"cut":false,"hidden":true,"merged":[]}
[]
[null,"Ans2",null,"Select",null,"Range",null,"seq","名前定義名","定義内容"]
[null,null,null,null,null,null,null,1,"hai","是"]
[null,"是",null,"该当",null,"１．部门业绩",null,2,"iie","否"]
[null,"否",null,null,null,"２．公司业绩",null,3,"na","N/A"]
[null,"N/A",null,null,null,"３．全公司业绩",null,4,"mikinyu","未填写项"]
[null,null,null,null,null,"４．公司信誉",null,5,"ari","检查表上有"]