{"text_format":"2","workbook":"xlsx","n_sheets":1,"sheets":["应用系统 "],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"应用系统 ","index":0,"n_rows":24,"n_cols":16,"rows_kept":24,"cut":false,"hidden":false,"merged":[[22,9,23,9],[1,9,1,13],[2,9,4,9],[5,9,8,9],[9,9,11,9],[12,9,16,9],[19,9,20,9]]}
["ObjectType","RelatedAssets","IsChange","TestItemNumber","TestItemNum","StdCode","Extend","安全层面","序号","安全控制点","控制项","结果记录","符合情况","备注"]
[{"$nulls":8},1,"安全通用要求"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-01-01","SHTEC-05-01-01-3X-01-01","GBT22239-2019",1,"安全计算环境",2,"身份鉴别","a）应对登录的用户进行身份标识和鉴别，身份标识具有唯一性，身份鉴别信息具有复杂度要求并定期更换；","","","密码最小长度、组成、更换周期",null,"系统开发单位："]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-01-02","SHTEC-05-01-01-3X-01-02","GBT22239-2019",1,"安全计算环境",3,null,"b）应具有登录失败处理功能，应配置并启用结束会话、限制非法登录次数和当登录连接超时自动退出等相关措施；","","","密码输错几次锁定多久、页面超时时间",null,"业务应用功能描述："]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-01-03","SHTEC-05-01-01-3X-01-03","GBT22239-2019",1,"安全计算环境",4,null,"c）当进行远程管理时，应采取必要措施防止鉴别信息在网络传输过程中被窃听。","","","http/https"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-02-01","SHTEC-05-01-01-3X-02-01","GBT22239-2019",1,"安全计算环境",5,"访问控制","a）应对登录的用户分配账户和权限；","","","用户都有哪些"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-02-02","SHTEC-05-01-01-3X-02-02","GBT22239-2019",1,"安全计算环境",6,null,"b）应重命名或删除默认账户，修改默认账户的默认口令；","","","默认账户名是否修改"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-02-03","SHTEC-05-01-01-3X-02-03","GBT22239-2019",1,"安全计算环境",7,null,"c）应及时删除或停用多余的、过期的账户，避免共享账户的存在；","","",""]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-02-04","SHTEC-05-01-01-3X-02-04","GBT22239-2019",1,"安全计算环境",8,null,"d）应授予管理用户所需的最小权限，实现管理用户的权限分离。","","","所有用户权限如何划分的"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-03-01","SHTEC-05-01-01-3X-03-01","GBT22239-2019",1,"安全计算环境",9,"安全审计","a）应启用安全审计功能，审计覆盖到每个用户，对重要的用户行为和重要安全事件进行审计；","","","是否有日志，如操作日志、事件日志"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-03-02","SHTEC-05-01-01-3X-03-02","GBT22239-2019",1,"安全计算环境",10,null,"b）审计记录应包括事件的日期和时间、用户、事件类型、事件是否成功及其他与审计相关的信息；","","","日志内容有哪些"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-03-03","SHTEC-05-01-01-3X-03-03","GBT22239-2019",1,"安全计算环境",11,null,"c）应对审计记录进行保护，定期备份，避免受到未预期的删除、修改或覆盖等。","","","日志存在哪里，能存多久，是否有备份"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-04-01","SHTEC-05-01-01-3X-04-01","GBT22239-2019",1,"安全计算环境",12,"入侵防范","a）应遵循最小安装的原则，仅安装需要的组件和应用程序；","应用系统此项不适用。","不适用"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-04-02","SHTEC-05-01-01-3X-04-02","GBT22239-2019",1,"安全计算环境",13,null,"b）应关闭不需要的系统服务、默认共享和高危端口；","应用系统此项不适用。","不适用",""]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-04-03","SHTEC-05-01-01-3X-04-03","GBT22239-2019",1,"安全计算环境",14,null,"c）应通过设定终端接入方式或网络地址范围对通过网络进行管理的管理终端进行限制；","应用系统此项不适用。","不适用",""]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-04-04","SHTEC-05-01-01-3X-04-04","GBT22239-2019",1,"安全计算环境",15,null,"d）应提供数据有效性检验功能，保证通过人机接口输入或通过通信接口输入的内容符合系统设定要求；","","","是否有特殊字符过滤等输入过滤"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-04-05","SHTEC-05-01-01-3X-04-05","GBT22239-2019",1,"安全计算环境",16,null,"e）应能发现可能存在的已知漏洞，并在经过充分测试评估后，及时修补漏洞。","","","是否有做漏洞扫描"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-06-01","SHTEC-05-01-01-3X-06-01","GBT22239-2019",1,"安全计算环境",17,"可信验证","a）可基于可信根对计算设备的系统引导程序、系统程序、重要配置参数和应用程序等进行可信验证，并在检测到其可信性受到破坏后进行报警，并将验证结果形成审计记录送至安全管理中心。","","",""]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-07-01","SHTEC-05-01-01-3X-07-01","GBT22239-2019",1,"安全计算环境",18,"数据完整性","a）应采用校验技术保证重要数据在传输过程中的完整性。","","","http/https"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-09-01","SHTEC-05-01-01-3X-09-01","GBT22239-2019",1,"安全计算环境",19,"数据备份恢复","a）应提供重要数据的本地数据备份与恢复功能；","","","应用数据备份情况，周期、地点、有无恢复测试"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-09-02","SHTEC-05-01-01-3X-09-02","GBT22239-2019",1,"安全计算环境",20,null,"b）应提供异地数据备份功能，利用通信网络将重要数据定时批量传送至备用场地。","","","异地备份情况"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-10-01","SHTEC-05-01-01-3X-10-01","GBT22239-2019",1,"安全计算环境",21,"剩余信息保护","a）应保证鉴别信息所在的存储空间被释放或重新分配前得到完全清除。","","","用户退出后是否会清除session"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-11-01","SHTEC-05-01-01-3X-11-01","GBT22239-2019",1,"安全计算环境",22,"个人信息保护","a）应仅采集和保存业务必需的用户个人信息；","","","采集哪些个人信息"]
["业务应用系统","区委组织部智慧组工系统",6,"SHTEC-05-01-01-35-11-02","SHTEC-05-01-01-3X-11-02","GBT22239-2019",1,"安全计算环境",23,null,"b）应禁止未授权访问和非法使用用户个人信息。","","",""]