{"text_format":"1","workbook":"xlsx","n_sheets":5,"sheets":["清冊","威脅與弱點評估","巨集","風險類型暨風險對策參考表","設定(勿刪)"],"not_rendered":{"charts":0,"images":2,"macros":1,"external_links":0,"defined_names":22,"comments":3,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"清冊","index":0,"n_rows":6,"n_cols":21,"rows_kept":6,"cut":false,"hidden":false,"merged":[[1,17,1,20],[1,0,1,1],[0,0,0,20],[2,0,4,0],[2,13,2,20],[3,13,3,14],[3,15,3,16],[3,17,3,18],[2,1,4,1],[2,2,4,2],[3,9,3,12],[2,3,4,3],[2,4,4,4],[2,8,4,8],[2,9,2,12],[2,5,4,5],[2,6,3,7]]}
["國立東華大學 個資盤點表"]
["版本",null,"V1.7",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"日期：114  年    10   月    31  日"]
["編號","承辦人","處室  /院","組別 / 系所","個人資料檔案名稱","有否特種資料？何種特種資料？","個人資料之\n範圍與數量",null,"資料型式","資料蒐集/處理",null,null,null,"資料處理/利用"]
[null,null,null,null,null,null,null,null,null,"(原始+蒐集方法)或(衍生+衍生方法)\n二選一填寫",null,null,null,"內部傳送",null,"保管",null,"外部傳送",null,"廢棄","委託"]
[null,null,null,null,null,null,"範圍","每年筆數\n(大約)",null,"原始資料","蒐集方法","衍生資料","衍生方法","資料流向","傳送方式","保管方式","保存期限","資料流向","傳送方式","方式","有/無"]
["範例","OO助理","OO學院","OO學系/所","學籍管理資料","有(身心\n障礙類\n別及等\n級)","學號、中英文姓名、性別、身份證字號、出生日期、家長姓名、中英文系所全名、學制別、年級、學籍狀態、電話、戶籍地址、通訊地址、原畢業學校、國籍、障礙別、學期數、身份明細、父母姓名、父母職業、招生類別、校區、Email、行動電話、校內身份、緊急連絡人姓名、緊急連絡人關係、緊急連絡人電話/手機、是否在職生、護照號碼、居留證號碼、原畢業系所名稱、海外中五生",">1000","資料庫",null,null,"學籍管理系統","查詢","無","無","儲存於資料庫/主機伺服器","永久保存","無","無","無","無"]

{"sheet":"威脅與弱點評估","index":1,"n_rows":8,"n_cols":13,"rows_kept":8,"cut":false,"hidden":false,"merged":[[323,4,327,4],[1,2,1,9],[333,0,337,0],[333,1,337,1],[333,2,337,2],[333,3,337,3],[333,4,337,4],[333,5,337,5],[323,5,327,5],[328,4,332,4],[328,5,332,5],[323,0,327,0],[323,1,327,1],[323,2,327,2],[323,3,327,3],[328,2,332,2],[328,3,332,3],[328,0,332,0],[328,1,332,1],[308,1,312,1],[318,0,322,0],[318,1,322,1],[318,2,322,2],[318,3,322,3],[313,0,317,0],[313,1,317,1],[313,2,317,2],[313,3,317,3],[313,4,317,4],[318,4,322,4],[313,5,317,5],[308,2,312,2],[308,3,312,3],[318,5,322,5],[298,4,302,4],[298,5,302,5],[303,4,307,4],[303,5,307,5],[308,4,312,4],[308,5,312,5],[298,0,302,0],[298,1,302,1],[298,2,302,2],[298,3,302,3],[303,0,307,0],[303,1,307,1],[303,2,307,2],[303,3,307,3],[308,0,312,0],[293,0,297,0],[293,1,297,1],[293,2,297,2],[293,3,297,3],[293,4,297,4],[293,5,297,5],[278,4,282,4],[278,5,282,5],[283,4,287,4],[283,5,287,5],[288,4,292,4],[288,5,292,5],[283,0,287,0],[283,1,287,1],[283,2,287,2],[283,3,287,3],[288,2,292,2],[288,3,292,3],[288,0,292,0],[288,1,292,1],[268,0,272,0],[268,1,272,1],[278,0,282,0],[278,1,282,1],[278,2,282,2],[278,3,282,3],[273,0,277,0],[273,1,277,1],[273,2,277,2],[273,3,277,3],[273,4,277,4],[273,5,277,5],[268,2,272,2],[268,3,272,3],[258,4,262,4],[258,5,262,5],[263,4,267,4],[263,5,267,5],[268,4,272,4],[268,5,272,5],[258,0,262,0],[258,1,262,1],[258,2,262,2],[258,3,262,3],[263,0,267,0],[263,1,267,1],[263,2,267,2],[263,3,267,3],[253,0,257,0],[253,1,257,1],[253,2,257,2],[253,3,257,3],[253,4,257,4],[253,5,257,5],[238,4,242,4],[238,5,242,5],[243,4,247,4],[243,5,247,5],[248,4,252,4],[248,5,252,5],[243,0,247,0],[243,1,247,1],[243,2,247,2],[243,3,247,3],[248,2,252,2],[248,3,252,3],[248,0,252,0],[248,1,252,1],[228,0,232,0],[228,1,232,1],[238,0,242,0],[238,1,242,1],[238,2,242,2],[238,3,242,3],[233,0,237,0],[233,1,237,1],[233,2,237,2],[233,3,237,3],[233,4,237,4],[233,5,237,5],[228,2,232,2],[228,3,232,3],[218,4,222,4],[218,5,222,5],[223,4,227,4],[223,5,227,5],[228,4,232,4],[228,5,232,5],[218,0,222,0],[218,1,222,1],[218,2,222,2],[218,3,222,3],[223,0,227,0],[223,1,227,1],[223,2,227,2],[223,3,227,3],[213,0,217,0],[213,1,217,1],[213,2,217,2],[213,3,217,3],[213,4,217,4],[213,5,217,5],[198,4,202,4],[198,5,202,5],[203,4,207,4],[203,5,207,5],[208,4,212,4],[208,5,212,5],[203,0,207,0],[203,1,207,1],[203,2,207,2],[203,3,207,3],[208,2,212,2],[208,3,212,3],[208,0,212,0],[208,1,212,1],[188,0,192,0],[188,1,192,1],[198,0,202,0],[198,1,202,1],[198,2,202,2],[198,3,202,3],[193,0,197,0],[193,1,197,1],[193,2,197,2],[193,3,197,3],[193,4,197,4],[193,5,197,5],[188,2,192,2],[188,3,192,3],[178,4,182,4],[178,5,182,5],[183,4,187,4],[183,5,187,5],[188,4,192,4],[188,5,192,5],[178,0,182,0],[178,1,182,1],[178,2,182,2],[178,3,182,3],[183,0,187,0],[183,1,187,1],[183,2,187,2],[183,3,187,3],[173,0,177,0],[173,1,177,1],[173,2,177,2],[173,3,177,3],[173,4,177,4],[173,5,177,5],[158,4,162,4],[158,5,162,5],[163,4,167,4],[163,5,167,5],[168,4,172,4],[168,5,172,5],[163,0,167,0],[163,1,167,1],[163,2,167,2],[163,3,167,3],[168,2,172,2],[168,3,172,3],[168,0,172,0],[168,1,172,1],[148,0,152,0],[148,1,152,1],[158,0,162,0],[158,1,162,1],[158,2,162,2],[158,3,162,3],[153,0,157,0],[153,1,157,1],[153,2,157,2],[153,3,157,3],[153,4,157,4],[153,5,157,5],[148,2,152,2],[148,3,152,3],[138,4,142,4],[138,5,142,5],[143,4,147,4],[143,5,147,5],[148,4,152,4],[148,5,152,5],[138,0,142,0],[138,1,142,1],[138,2,142,2],[138,3,142,3],[143,0,147,0],[143,1,147,1],[143,2,147,2],[143,3,147,3],[133,0,137,0],[133,1,137,1],[133,2,137,2],[133,3,137,3],[133,4,137,4],[133,5,137,5],[118,4,122,4],[118,5,122,5],[123,4,127,4],[123,5,127,5],[128,4,132,4],[128,5,132,5],[123,0,127,0],[123,1,127,1],[123,2,127,2],[123,3,127,3],[128,2,132,2],[128,3,132,3],[128,0,132,0],[128,1,132,1],[108,0,112,0],[108,1,112,1],[118,0,122,0],[118,1,122,1],[118,2,122,2],[118,3,122,3],[113,0,117,0],[113,1,117,1],[113,2,117,2],[113,3,117,3],[113,4,117,4],[113,5,117,5],[108,2,112,2],[108,3,112,3],[98,4,102,4],[98,5,102,5],[103,4,107,4],[103,5,107,5],[108,4,112,4],[108,5,112,5],[98,0,102,0],[98,1,102,1],[98,2,102,2],[98,3,102,3],[103,0,107,0],[103,1,107,1],[103,2,107,2],[103,3,107,3],[93,0,97,0],[93,1,97,1],[93,2,97,2],[93,3,97,3],[93,4,97,4],[93,5,97,5],[78,4,82,4],[78,5,82,5],[83,4,87,4],[83,5,87,5],[88,4,92,4],[88,5,92,5],[83,0,87,0],[83,1,87,1],[83,2,87,2],[83,3,87,3],[88,2,92,2],[88,3,92,3],[88,0,92,0],[88,1,92,1],[68,0,72,0],[68,1,72,1],[78,0,82,0],[78,1,82,1],[78,2,82,2],[78,3,82,3],[73,0,77,0],[73,1,77,1],[73,2,77,2],[73,3,77,3],[73,4,77,4],[73,5,77,5],[68,2,72,2],[68,3,72,3],[58,4,62,4],[58,5,62,5],[63,4,67,4],[63,5,67,5],[68,4,72,4],[68,5,72,5],[58,0,62,0],[58,1,62,1],[58,2,62,2],[58,3,62,3],[63,0,67,0],[63,1,67,1],[63,2,67,2],[63,3,67,3],[53,0,57,0],[53,1,57,1],[53,2,57,2],[53,3,57,3],[53,5,57,5],[38,4,42,4],[38,5,42,5],[43,4,47,4],[43,5,47,5],[48,4,52,4],[48,5,52,5],[43,0,47,0],[43,1,47,1],[43,2,47,2],[43,3,47,3],[48,2,52,2],[48,3,52,3],[48,0,52,0],[48,1,52,1],[38,0,42,0],[38,1,42,1],[38,2,42,2],[38,3,42,3],[33,0,37,0],[33,1,37,1],[33,2,37,2],[33,3,37,3],[53,4,57,4],[23,0,27,0],[23,1,27,1],[23,2,27,2],[23,3,27,3],[28,0,32,0],[28,1,32,1],[33,4,37,4],[33,5,37,5],[28,2,32,2],[28,3,32,3],[18,4,22,4],[18,5,22,5],[23,4,27,4],[23,5,27,5],[28,4,32,4],[28,5,32,5],[13,0,17,0],[13,1,17,1],[13,2,17,2],[13,3,17,3],[13,4,17,4],[13,5,17,5],[8,0,12,0],[8,1,12,1],[18,0,22,0],[18,1,22,1],[18,2,22,2],[18,3,22,3],[8,4,12,4],[1,10,1,12],[3,5,7,5],[8,2,12,2],[8,3,12,3],[0,0,0,12],[3,0,7,0],[3,1,7,1],[3,2,7,2],[3,3,7,3],[3,4,7,4],[8,5,12,5]]}
["國立東華大學 威脅與弱點評估表"]
["版本","V1.7","單位： ",null,null,null,null,null,null,null,"  日期：            年          月          日"]
["編號","個人資料檔案","有無特種個資","個資識別程度","檔案數量(目前累計筆數)","檔案價值","作業情境","作業內容","具體風險類型","弱點等級\n(檔案衝擊)","威脅等級\n(發生可能性)","風險等級","風險處理對策"]
["範例","學籍管理資料 (資料庫)","有","H","H","H","加工","查詢","帳號密碼外洩","H","H","H","加強密碼強度，定期更新密碼，勿將帳密記錄在明顯位置。"]
[null,null,null,null,null,null,"內部傳送"]
[null,null,null,null,null,null,"保管","儲存資料庫/主機伺服器","不當存取資料","L","L","H","設定伺服器專用資料夾存取權限，並將存取權限限於該業管人員"]
[null,null,null,null,null,null,"外部傳送"]
[null,null,null,null,null,null,"刪除","刪除檔案","不可刪除誤刪除","H","L","H","檔案定時備份，將系統刪除功能鎖定。設定檔案記錄刪除的時間、IP等功能，以便後續追查。"]

{"sheet":"巨集","index":2,"n_rows":3,"n_cols":7,"rows_kept":3,"cut":false,"hidden":false,"merged":[[2,6,6,12]]}
[]
[]
[null,null,null,null,null,null,"※巨集功能僅是提供填表人快速建立威脅與弱點評估，如清冊的格式填寫方式錯誤，巨集會因為抓不到清冊中的關鍵字，導致產生的評估表內容有誤。\n\n※使用巨集產生了威脅與弱點評估表後，記得要再次人工檢查全部內容，以防出現不可預期之錯誤。"]

{"sheet":"風險類型暨風險對策參考表","index":3,"n_rows":52,"n_cols":9,"rows_kept":52,"cut":false,"hidden":false,"merged":[[11,0,19,0],[20,1,23,1],[1,1,3,1],[4,1,5,1],[7,1,8,1],[11,1,14,1],[15,1,17,1],[1,0,10,0],[45,0,51,0],[24,1,27,1],[40,1,42,1],[28,1,29,1],[20,0,30,0],[36,1,39,1],[48,1,50,1],[31,1,34,1],[31,0,44,0],[45,1,47,1]]}
["作業情境","作業內容","具體風險類型","風險處理對策",null,null,null,null,"備註"]
["加工","輸入/編輯","輸入錯誤資料或遺漏輸入資料","確認輸入/編輯程序，執行人員訓練、輸入/編輯後再次檢查內容、將輸入/編輯結果列印與電腦輸入/編輯資料對照、按輸入個資的重要性採取重複輸入、交互檢查",null,null,null,null,"作業內容中要採用的具體風險類型與對策請將背景用此顏色填滿"]
[null,null,"輸入時遭外部人員窺視","個人電腦設置區域遠離外部人員、離席時啟動登出功能、鎖定電腦的螢幕保護程式、按個資重要性限制輸入專用處所、終端機及人員",null,null,null,null,"「永久保存」的部分背景用此顏色填滿"]
[null,null,"個資遭竄改","限制輸入/編輯作業人員權限，於必要時實施交互檢查輸入/編輯內容、實施個資保護教育並簽具切結書",null,null,null,null,"1.背景填色僅為巨集產生風險評鑑表使用。\n2.僅在風險參考表(這個工作表)上色即可。\n3.不用在清冊中上背景顏色。"]
[null,"輸出/列印","不當存取","權限設定"]
[null,null,"列印文件未及時取走致外洩","列印後迅速回收"]
[null,"輸出/儲存","不當存取","權限設定"]
[null,"影印","不當存取","權限設定"]
[null,null,"影印文件未及時取走致外洩","影印後迅速回收"]
[null,"掃描","不當存取","權限設定"]
[null,"查詢","帳號密碼外洩","加強密碼強度，定期更新密碼，勿將帳密記錄在明顯位置。"]
["內部傳送","人員親送","收發記載不確實以致遺失","確認收受紀錄媒體內容、件數，雙方留存收受紀錄"]
[null,null,"紙本資料遭竊或遺失","使用傳遞專用公事包及隨身保管公事包、傳遞途中不作停留"]
[null,null,"傳遞交付對象錯誤致遺失","確認移交對象，並雙方留存收發紀錄"]
[null,null,"USB等外接紀錄媒體遺失","將USB等外接紀錄媒體按儲存個資重要性加以密碼鎖碼或暗號化"]
[null,"Email","Email網址或信件內容錯誤致外洩","寄信之前再次確認寄送Email網址及寄信內容、有必要時使用Email軟體所附的寄信網址再檢查功能"]
[null,null,"Email傳送中被竊取","將包含個資的文件以附加檔案方式加上設定密碼"]
[null,null,"Email遺失","規定Email的儲存場所，並保存收信的Email"]
[null,"系統/網路/網站","透過網路伺服器傳送時被竊取","個資檔案以VPN或SSL加密傳送"]
[null,"面交","傳遞交付對象錯誤致遺失","確認移交對象，並雙方留存收發紀錄"]
["保管","個人電腦","不當存取","處理權限設定、防範登錄帳號密碼被他人知悉、不使用密碼記憶功能、定期變更密碼、定期檢查有無不當存取"]
[null,null,"個人電腦故障致無法讀取該資料","蒐集資料後立刻將資料存於伺服器專用資料夾"]
[null,null,"個人電腦遭外部攻擊","安裝防毒軟體並定期更新防毒碼、使用弱點掃描"]
[null,null,"個人電腦安裝非法軟體導致外洩","禁止安裝非法軟體"]
[null,"資料庫/主機伺服器","不當存取資料","設定伺服器專用資料夾存取權限，並將存取權限限於該業管人員"]
[null,null,"伺服器專用資料夾故障致無法讀取該筆資料","定期將伺服器專用資料夾資料以其他方式備份、按個資重要性將備份分散保管"]
[null,null,"伺服器遭外部攻擊","安裝防毒軟體並定期更新防毒碼、使用弱點掃描"]
[null,null,"帳號密碼外洩導致資料遭外人取得","加強密碼強度，定期更新密碼，勿將帳密記錄在明顯位置。"]
[null,"抽屜/個人檔案櫃","不當存取(資料沒有依規定放入個人櫃或抽屜，直接放置於桌上遭外部人員窺視)","保持桌面淨空、紙本文件作業場所遠離外部人員、離席時要將資料收於抽屜中。"]
[null,null,"保管資料的文件櫃忘記上鎖遭外部人員竊取致外洩。","文件櫃外部不標示保管文件種類內容、下班後確認文件櫃確實上鎖。"]
[null,"檔案室","不當存取(任何人都可以進入檔案室取得資料)","限制人員進入檔案室、重要資訊應上鎖保管"]
["外部傳送","人員親送","收發記載不確實以致遺失","確認收受紀錄媒體內容、件數，雙方留存收受紀錄"]
[null,null,"紙本資料遭竊或遺失","使用傳遞專用公事包及隨身保管公事包、傳遞途中不作停留"]
[null,null,"傳遞交付對象錯誤致遺失","確認移交對象，並雙方留存收發紀錄"]
[null,null,"USB等外接紀錄媒體遺失","將USB等外接紀錄媒體按儲存個資重要性加以密碼鎖碼或暗號化"]
[null,"郵寄","郵寄過程中遺失","採取掛號、雙掛號可留紀錄的郵寄方法"]
[null,"傳真","傳真收發記載不確實以致遺失","將收到的紀錄媒體轉交業管人員時留存確認紀錄"]
[null,null,"傳真處所或傳真內容搞錯致外洩","傳真前確認傳真處所電話及傳真內容、傳真前先與傳針對方電話聯絡、確認傳真傳送紀錄"]
[null,null,"傳真放置於傳真機上逾時致外洩","傳真傳出後迅速回收"]
[null,null,"報廢或退還傳真機時外洩","規定定期刪除多功能傳真機的硬碟資料庫並實施刪除動作"]
[null,"Email","Email網址或信件內容錯誤致外洩","寄信之前再次確認寄送Email網址及寄信內容、有必要時使用Email軟體所附的寄信網址再檢查功能"]
[null,null,"Email傳送中被竊取","將包含個資的文件以附加檔案方式加上設定密碼"]
[null,null,"Email遺失","規定Email的儲存場所，並保存收信的Email"]
[null,"系統/網路/網站","編輯有誤導至上傳的資料不正確","必要時實施交互檢查資料內容"]
[null,"面交","傳遞交付對象錯誤致遺失","確認移交對象，並雙方留存收發紀錄"]
["廢棄","刪除","未到刪除日期前過失刪除","訂定具體刪除日期，並取得主管同意、確認後進行刪除。"]
[null,null,"刪除不夠落實致外洩","規定刪除程序並確實刪除"]
[null,null,"不可刪除誤刪除","檔案定時備份，將系統刪除功能鎖定。設定檔案記錄刪除的時間、IP等功能，以便後續追查。"]
[null,"碎紙銷毁","未到銷燬日期前過失銷燬","訂定個資的保存期間，並取得主管同意、確認後進行刪除銷燬。"]
[null,null,"刪除處理不夠確實致外洩","規定刪除程序並確實刪除"]
[null,null,"不可銷毀誤銷毀","檔案管理放置於不可刪除區域"]
[null,"其它","資料移交時，交付對象錯誤致遺失。","在移交資料時，確認資料正確性與移交對象，並雙方留存收發紀錄。"]

{"sheet":"設定(勿刪)","index":4,"n_rows":25,"n_cols":13,"rows_kept":25,"cut":false,"hidden":false,"merged":[[8,0,8,12],[9,10,9,12],[9,2,9,9]]}
["文件資料類型","Y_N","廢棄方式"]
["紙本","有","刪除"]
["電子","無","碎紙銷毀"]
["資料庫",null,"其它"]
[null,null,"無"]
[]
[]
[]
["國立東華大學 威脅與弱點評估表"]
["版本","V1.7","單位： ",null,null,null,null,null,null,null,"  日期：            年          月          日"]
["編號","個人資料檔案","有無特種個資","個資識別程度","檔案數量(目前累計筆數)","檔案價值","作業情境","作業內容","具體風險類型","弱點等級\n(檔案衝擊)","威脅等級\n(發生可能性)","風險等級","風險處理對策"]
[]
[]
[]
[]
[]
["原始資料","蒐集方法","衍生方法","傳送方式","保管方式"]
["當事人","Email","輸入/編輯","人員親送","儲存於個人電腦"]
["教學單位","網站/系統","輸出/列印","Email","儲存於資料庫/主機伺服器"]
["行政單位","電話/現場","輸出/儲存","傳真","存放於個人櫃/抽屜"]
["教師/行政人員","傳真","影印","郵寄","存放於檔案室"]
["其它","申請表","掃描","面交","其它"]
[null,"人員親送","查詢","系統/網路/網站"]
[null,"其它","其它","其它"]
[null,null,null,"無"]