{"text_format":"1","workbook":"xlsx","n_sheets":11,"sheets":["Revision and Information","Scope","目的","Company Info(組織の情報)","Risk Rating Business(事業の複雑さ)","Risk Rating IT(ITの複雑さ)","Demographics(要員に関する質問)","C&R（C&R)","Loc Info(拠点情報)","Additional Information(その他の情報)","Revisions"],"not_rendered":{"charts":0,"images":2,"macros":1,"external_links":0,"defined_names":17,"comments":2,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Revision and Information","index":0,"n_rows":5,"n_cols":7,"rows_kept":5,"cut":false,"hidden":true,"merged":[[2,3,3,3],[2,4,3,4],[2,6,3,6]]}
[]
[null,"Revision History"]
[null,"Rev","Revision","Author","Approved by","Sec.","Brief Description of Change"]
[null,"No","Date",null,null,"No"]
[null,0,null,"J. DiMaria","Alfred Au",null,"New Format"]

{"sheet":"Scope","index":1,"n_rows":17,"n_cols":2,"rows_kept":17,"cut":false,"hidden":false,"merged":[]}
[]
[null,"Information Request Form PF142 Revison 9 August 2018"]
[]
[]
[]
[]
[]
[]
[null,"The information requested in this spreadsheet is vital information to:"]
[]
[1,"Ensure BSI complies with the accreditation requirements as defined in ISO/IEC 27006:2015 Information technology— Security techniques —Requirements for bodies providing audit and certification of information security management systems "]
[]
[2,"Allow BSI to provide you with the most accurate, cost effective and value add proposal that meets the strategic direction and expected outcome for your organizations and its needs"]
[]
[null,"Some cells will have help notes indicated with the red mark in the upper right hand corner of the cell."]
[]
[null,"If you have any questions regarding this form, please do not hesitate to contact your Account Manager for further guidance"]

{"sheet":"目的","index":2,"n_rows":24,"n_cols":2,"rows_kept":24,"cut":false,"hidden":false,"merged":[]}
[]
[null,"Information Request Form PF142 Revison 9 August 2018"]
[]
[]
[]
[]
[]
[]
[null,"The information requested in this spreadsheet is vital information to:"]
[null,"この書類でお伺いしている情報は、以下のための重要な情報です。"]
[]
[1,"Ensure BSI complies with the accreditation requirements as defined in ISO/IEC 27006:2015 Information technology— Security techniques —Requirements for bodies providing audit and certification of information security management systems "]
[null,"BSIが「ISO/IEC 27006:2015 情報技術 - セキュリティ技術 - 情報セキュリティマネジメントシステムの審査及び認証を行う機関に対する要求事項」に定義されている認定の要求に準拠していることを確実にするため。"]
[]
[2,"Allow BSI to provide you with the most accurate, cost effective and value add proposal that meets the strategic direction and expected outcome for your organizations and its needs"]
[null,"BSIがお客様の組織とそのニーズに対する戦略的方向性と期待される成果を満たす、最も正確で費用対効果の高い、付加価値のある提案を提供できるようにするため。"]
[]
[null,"Some cells will have help notes indicated with the red mark in the upper right hand corner of the cell."]
[null,"セルの右上隅に赤いマークが付いているセルには、入力のためのヒントが表示されます。"]
[]
[null,"If you have any questions regarding this form, please do not hesitate to contact your Account Manager for further guidance"]
[null,"ご記入に当たりご不明な点があれば、営業担当者にお問合せください。"]
[]
[null,"入力は日本語のみで結構です。"]

{"sheet":"Company Info(組織の情報)","index":3,"n_rows":11,"n_cols":1,"rows_kept":11,"cut":false,"hidden":false,"merged":[[7,0,7,1],[7,2,7,6],[8,0,8,1],[8,2,8,6],[10,0,10,1],[10,2,10,6],[1,0,1,6],[2,0,2,1],[2,2,2,6],[3,0,3,1],[3,2,3,6],[4,0,4,1],[4,2,4,6],[5,0,5,6],[9,0,9,1],[9,2,9,6],[6,0,6,1],[6,2,6,6]]}
[]
["Section 1 Updates: Overview of Organization & Scope\nセクション１：組織と認証範囲の概要"]
["Company Name:\n会社・組織名"]
["Primary Contact (Name, Email, Phone):　\n主担当者　 (名前, Email, 電話)"]
["Billing Contact (Name, Email Phone):\n請求宛先　 (名前, Email, 電話)　"]
["Scope of certification - Provide an overview of the following:\n認証登録の範囲 - 以下の項目についてお知らせください"]
["Scope of Certification:　\n認証登録の範囲                                                            * An ISMS may operate for the whole company but requires certification for a subset.\n* ISMSは全社で運用していますが、認証は一部で取得することもできます。"]
["Relevant Services and/or Processes within Scope:\n認証範囲に含まれるサービス及びプロセス\n"]
["Type of Information in Scope:\n認証範囲内の情報の種類"]
["Target Scope Statement:\n希望する認証登録範囲の表記"]
["How long have you been operating the ISMS?\nISMSの運用期間"]

{"sheet":"Risk Rating Business(事業の複雑さ)","index":4,"n_rows":24,"n_cols":3,"rows_kept":24,"cut":false,"hidden":false,"merged":[[0,1,0,2],[8,1,8,2],[23,1,23,2],[2,1,2,2],[21,1,22,2],[12,1,14,2],[15,1,15,2],[17,1,17,2],[6,1,6,2]]}
[null,"Section 2 Business and Information Technology Information - Updates\nセクション 2 事業とITに関する情報"]
[]
[null,"Organizational Processes – (Select one option from the following):\n組織のプロセス（次の中から1つを選んでください）"]
[null,"1 Standard processes with standard and repetitive tasks; lots of persons doing work under the organization’s control carrying out the same tasks; few products or services.\n1. 標準的で繰り返しの作業が通常プロセスであり、組織の管理下で働く多くの人が同じ作業をしている。製品又はサービスの数が少ない。","☐"]
[null,"2 Standard but non-repetitive processes, with high number of products or services.\n2. 標準的だが繰り返しのプロセスではない。多くの製品又はサービスがある。"]
[null,"3 Complex processes, high number of products and services, many business units included in the scope of certification (ISMS covers highly complex processes or relatively high number or unique activities).\n3. 認証範囲に、複雑なプロセス、多くの製品及びサービス、多くの事業部門がある（ISMSが非常に複雑なプロセス又は比較的多くの若しくは固有の活動を含む）。"]
[null,"Any other information: \nその他の情報"]
[]
[null,"Type of business performed within scope of the ISMS - (Select one option from the following):\nISMSの適用範囲内で実施される事業の種類（次の中から１つ選んでください。）"]
[null,"1 Your organization is a general business operating general legislative requirements and information is not considered to be critical.\n1. 一般的な法規制、要求事項で運営する組織で情報は特に重要なものとみなされない。"]
[null,"2 Your organization has customers in critical business sector (see Note 1 below).\n2. 組織は重要な事業分野で事業を行っている顧客にサービスを提供している（注1を参照）。"]
[null,"3 Your organization works in critical business sector that may affect critical public services that will cause risk to health, security, economy, image and government ability to function that may have a very large negative impact to the country.\n3. 組織は重要な事業分野で業務を行っており、厳しい規制の要求事項があり、情報は重要かつ/または国家的に重要とみなされている。"]
[null,"Any other information: \nその他の情報"]
[]
[]
[null,"*Note 1 - Critical business sector: medical services, security services, financial services, telecommunication services, cloud service provision, PII processing and critical public services\n*注1  - 重要な事業分野：\n医療サービス、セキュリティサービス、金融サービス、電気通信サービス、クラウドサービスプロバイダ、PIIプロセッサー。\n"]
[]
[null,"Complexity of ISMS -  (Select one option from the following):\nISMSの複雑さ（次の中から１つ選んでください。）"]
[null,"1 Only little sensitive or confidential information (see Note 2 below) or few critical assets (in terms of Confidentiality, Integrity and Availability)\n1. 取扱いに慎重を要する情報又は機密情報（注2を参照）がほとんどない、又は（機密性、完全性、可用性の観点から）重要な資産が多少ある。","☐"]
[null,"2 Some sensitive / confidential information or some critical assets\n2. 取扱いに慎重を要する情報又は機密情報が多い。","☐"]
[null,"3 Higher amount of sensitive or confidential information or many critical assets\n3. より多くの取扱いに慎重を要する情報又は機密情報又は重要な資産がかなり多い。","☐"]
[null,"Any other information: \nその他の情報"]
[]
[null,"*Note 2 - Sensitive or confidential information: health, personally identifiable information (PII), privacy, secret of communications, insurance, banking information, payment card information, national secret, classified information.\n*注2  - 機密情報または機密情報：\n健康、個人を特定できる情報 (PII)、プライバシー、通信の秘密、保険、銀行業務に関わる情報、クレジットカード情報、国家機密、軍事機密。\n"]

{"sheet":"Risk Rating IT(ITの複雑さ)","index":5,"n_rows":21,"n_cols":3,"rows_kept":21,"cut":false,"hidden":false,"merged":[[16,1,16,2],[20,1,21,2],[0,1,0,2],[2,1,2,2],[6,1,6,2],[8,1,8,2],[12,1,14,2]]}
[null,"Section 3 - IT Information - Updates\nセクション 3 - ITに関する情報"]
[]
[null,"Information Technology Infrastructure – (Select one option from the following):\nITインフラ - （次の中から1つを選んでください）"]
[null,"1 Few or highly standardized IT platforms, servers, operating systems, databases, networks, etc.\ne.g. Highly standardized environment with low diversity (few IT-platforms, servers, operating systems, databases, networks, etc.)\n1. ITプラットフォーム、サーバ、オペレーティングシステム、データベース、ネットワークなどの数が少ない、又は高度に標準化されている\n（例：インターネットアクセスを伴うLAN/WAN環境でのサーバが10以下（仮想化されたサーバ（VM）含む）の少数のサーバ、または一般的なクラウドサービスの利用）。"]
[null,"2 Several different IT platforms, servers, operating systems, databases, networks\ne.g. Standardized but diverse IT platforms, servers, operating systems, databases, networks\n2. いくつかの異なるITプラットフォーム、サーバ、オペレーティングシステム、データベース、ネットワークがある\n（例：LAN/WAN環境で様々な目的で異なるオペレーティングシステム上で稼働する100以下（仮想化されたサーバ（VM）含む）のサーバの中規模のネットワーク、または重要な目的のためのクラウドサービスの利用）。"]
[null,"3 Many different IT platforms, servers, operating systems, databases, networks \ne.g. High diversity or complexity of IT (e.g. many different segments of networks, types of servers or databases, number of key applications\n3. 多くの異なるITプラットフォーム、サーバ、オペレーティングシステム、データベース、ネットワークがある（ネット―ワーク/コミュニケーションサービスプロバイダ、クラウドサービスプロバイダといった、LAN/WAN環境で様々な目的で異なるオペレーティングシステム上で稼働する100以上（仮想化されたサーバ（VM）含む）のサーバの大規模ネットワーク）。"]
[null,"Any other information: \nその他の情報"]
[]
[null,"Availability Requirement – (Select one option from the following):\n可用性に関する要求 － （次の中から１つ選んでください）"]
[null,"1 General availability requirements\n1. 適用範囲の活動において可用性の要求事項が無い、または低い。","☐"]
[null,"2 Higher availability requirements (e.g. there is a possibility to not meet contract requirements or cause hindrance to the business by a short time system stop)\n2. 適用範囲の活動においてより可用性の高い要求事項がある。\n（例えば、短時間のシステム停止により契約要求事項を満たせない又は事業に支障が生じる可能性がある）","☐"]
[null,"3 High availability requirements (e.g. non-stop operation of the system is required for 24/7 by a contract or the requirements of business)\n3. 適用範囲の活動において高い可用性の要求事項がある。\n（例えば、契約又は事業上の要求事項により365日/24時間の無停止でのシステム稼働が求められる）","☐"]
[null,"Any other information: \nその他の情報"]
[]
[]
[]
[null,"Information System Development – (Select one option from the following):\n情報システムの開発の程度 －（次の中から１つ選んでください）"]
[null,"1 None or a very limited in-house system/application development\n1. 社内でのシステム／アプリケーションの開発は全くないか、または非常に限られている。"]
[null,"2 Some in-house or outsourced system/application development for some important business purposes\n2. いくつかの重要な事業目的に対して、社内または外部委託したシステム／アプリケーションの開発がいくつかある。","☐"]
[null,"3 Extensive in-house or outsourced system/application development for important business purposes or those related critical business services in critical business sectors.\n3. 重要な事業目的、または重要な事業セクターにおける関連する重要な事業サービスに対して、社内または外部委託したシステム／アプリケーション開発が広範囲に存在する。"]
[null,"Any other information: \nその他の情報"]

{"sheet":"Demographics(要員に関する質問)","index":6,"n_rows":16,"n_cols":2,"rows_kept":16,"cut":false,"hidden":false,"merged":[[6,0,7,0],[9,0,9,1],[15,0,15,1],[0,0,0,1]]}
["Section 4 - Demographics\nセクション 4 - 要員に関する質問"]
["Overview outsourced activities / functions and their suppliers (internal and external to the ISMS)[if any]:\nアウトソースしている活動/機能とそのサプライヤーの概要（ISMS内外）[該当する場合は詳細を記入してください]：\n"]
["Staff speaking more than one language (requiring interpreter(s) or preventing individual auditors from working independently) or documentation provided in more than one language.\nスタッフが複数の言語を話す（通訳を必要とする場合、あるいは言語のために審査員が一人で審査できない場合）、複数の言語で書かれた文書がある"]
["(please specify the language(s))   \n（言語を指定してください）   "]
["Where staff include a number of people who work \"off location\", e.g. salespersons, drivers, service personnel, staffs who are always working from home or in a customer site, etc. and it is possible substantially audit compliance of their activities with the system through review of records.\n職員に「社外」で働く多くの人々が含まれている場合：例えば営業担当者、運転手、サービス担当者、ホームオフィスやお客様先に常駐しているスタッフ。\n記録をレビューすることで、マネジメントシステム活動の遵守を監査することが実質的に可能な場合。\n"]
["(please specify how may people who work “off location”) \n（「社外」で働く人たちの人数を明記してください）     "]
["Any other information: \nその他の情報：     "]
[]
[]
["If you have existing certification with BSI or other certification body, please enter the details below:\nBSIまたは他の認証機関で認証をお持ちの場合は、以下に詳細をお知らせください："]
[null,"Certificate No."]
["    ","     "]
[null,"     "]
["     ","     "]
["      ","     "]
["Please attach copies of certificates not issued by BSI\nBSI以外で発行されている認証のコピーを添付してください。"]

{"sheet":"C&R（C&R)","index":7,"n_rows":14,"n_cols":3,"rows_kept":14,"cut":false,"hidden":false,"merged":[[0,0,0,1],[10,1,13,1],[10,2,13,2],[1,1,3,1],[1,2,3,2],[4,1,6,1],[4,2,6,2],[7,1,9,1],[7,2,9,2]]}
["Section 5 - C&R\nセクション 5 - コンプライアンス＆リスク"]
["Are there any specific legal or regulatory requirements that is applicable to the scope of certification?\n認証範囲に適用される特定の法規制要求事項がありますか？","Yes ","No "]
["If yes, please give details:\nもしある場合には、どのような法規制要求事項か記述してください："]
["     "]
["Are there any records or documents which cannot be reviewed by the BSI  Assessor even after signing the nondisclosure agreement?\n機密保持誓約書に署名していてもBSIの審査チームが審査でレビューできない機密情報を含む記録又は文書がありますか？","Yes ","No "]
["If yes, please give details:\nある場合には、どのような文書化記録かを記述してください："]
["     "]
["Are any special arrangements required to allow the BSI Assessor to conduct the audit e.g. special access permission / government security clearance etc.\nBSI審査員に審査を実施することを可能にするために特別な取り決めがありますか？　例えば、特別なアクセス許可 / 政府のセキュリティクリアランス等","Yes ","No "]
["If yes, please give details. \nある場合には、その内容を記述してください："]
["     "]
["Has a consultancy organization been used to assist you in the development or implementation of the Information Security Management System\n情報セキュリティマネジメントシステムの開発又は実施に際してコンサルタントを利用していますか？","Yes ","No "]
["If yes, please give details\nはいの場合は、詳細をお知らせください："]
["Company name: \nコンサル会社名："]
["Name of consultant: \nコンサルタントの方の氏名："]

{"sheet":"Loc Info(拠点情報)","index":8,"n_rows":7,"n_cols":29,"rows_kept":7,"cut":false,"hidden":false,"merged":[[0,0,0,6]]}
["Section 6 - Location Information - Updates\nセクション 6 - 場所の情報"]
[]
["New/Existing Site\n選択してください","Company Name\n会社名","Division\n部署","Location Description\n場所の説明","Is this site a Data Center?\nデータセンタですか？","Location Address\n所在地","City\n都市","Location IT/Business Activities\nそのサイトのIT/ビジネス活動を記載して下さい。","If extension to scope: Are these Activities and processes currently included in scope of certification?\n拡大サイトの場合：その活動とプロセスは現在の認証範囲に含まれていますか？","Information in scope (i.e. PII, Counter Party Information, Operational Information, PCI, Sensitive Customer Information, Sensitive Employee Information)\nスコープ内の情報 (例：PII、取引先情報、運用情報、PCI、機微な顧客情報、機微な従業員情報)"," Head Count (*Total number of relevant personnel doing work under the organization’s control for all shifts within desired scope of certification.)\n人数(*希望する認証範囲にいる組織の管理下で働くすべての勤務シフトの合計の人数)","Type of Business\nRisk Rating (1/2/3)\n事業の種類\n(1/2/3)で評価してください","IT Complexity\nRisk Rating (1/2/3) \nITの複雑さ\n(1/2/3)で評価してください","If known, identify applicable ISMS Annex A Controls\n分かればISMS付属書Aの\n対応している管理策を記載して下さい。"]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"新規サイト","自社保有",1]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"既存サイト","コロケーション",2]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"N/A",3]

{"sheet":"Additional Information(その他の情報)","index":9,"n_rows":13,"n_cols":1,"rows_kept":13,"cut":false,"hidden":false,"merged":[[2,0,2,7],[8,0,8,3],[8,4,8,7],[0,0,0,7],[1,0,1,7],[3,4,3,7],[4,4,4,7],[5,4,5,7],[6,4,6,7],[7,4,7,7],[3,0,3,3],[12,0,12,7],[13,0,13,7],[9,4,9,7],[10,4,10,7],[4,0,4,3],[5,0,5,3],[6,0,6,3],[7,0,7,3],[9,0,9,3],[10,0,10,3]]}
["Additional Information\n追加情報"]
[]
["If you have existing Regulatory Compliance Certificates, please list details below:    \n法令順守をしている証書をお持ちでしたら、以下の詳細情報を記載してください。              \n\n i.e.. ISO, SOC, NIST, HIPPA, GDPR, PCI, NRC, NERC"]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[" Additional Information\n追加情報"]

{"sheet":"Revisions","index":10,"n_rows":7,"n_cols":5,"rows_kept":7,"cut":false,"hidden":true,"merged":[[0,2,1,2],[0,4,1,4],[2,0,5,0],[2,1,5,1],[2,2,5,2],[2,3,5,3],[2,4,5,4],[10,0,13,0],[10,1,13,1],[10,2,13,2],[10,3,13,3],[10,4,13,4],[6,1,9,1],[6,2,9,2],[6,3,9,3],[6,4,9,4],[6,0,9,0],[18,0,21,0],[18,1,21,1],[18,2,21,2],[18,3,21,3],[18,4,21,4],[14,0,17,0],[14,1,17,1],[14,2,17,2],[14,3,17,3],[14,4,17,4]]}
["Rev","Revision","Author","Tab","Brief Description of Change"]
["No","Date"]
[2,"2018-08-08","JDM","Company Info","Added last section asking how long ISMS has been operated"]
[]
[]
[]
[null,"2018-08-08","JDM","Demographics","Added the word \"Remote\" to row 5"]