信息安全承諾書
Commitment on Information Security
1. 為了保護XXXX向物流商開放的用戶個人信息的信息安全,物流商向XXXX鄭重承諾遵守以下條款:
1. In order to protect the users' personal information released by XXXX to the logistics provider, the logistics provider solemnly undertakes to XXXX to abide by the following terms:
1.1 建立和完善信息安全管理制度,認真落實信息安全技術防護措施;定期開展風險評估工作,認真排查自身信息系統的安全隱患和漏洞,對薄弱環節和潛在威脅采取切實有效的整改措施,以避免和消除信息安全風險,確保信息系統安全可靠地運行。
1.1 Establish and improve the information security management system, and seriously implement the protection measures with information security technology; regularly carry out risk assessment, carefully check the hidden security risks and bugs of its own information systems, and take practical and effective rectification measures for weak links and potential threats to avoid and eliminate information security risks and ensure the safe and reliable operation of information systems.
1.2 建立和健全相應的數據分類分級規范、敏感信息操作日志和基礎架構日志規范,并嚴格按照數據分類分級規范使用用戶個人信息,確保用戶個人資料不泄漏。
1.2 Establish and improve relevant specifications for data classification, sensitive information operation log and infrastructure log, and use the users' personal information in strict accordance with the specifications on data classification to ensure that such information won't be leaked.
1.3 僅將從XXXX獲取的用戶個人信息用于物流商履行提供《XXXX平臺合作協議》(下稱“合作協議”)及各產品協議下的物流服務的用途。未經XXXX事先書面允許,不得超范圍使用,更不得以任何形式提供給第三方。
1.3 The users' personal information obtained from XXXX is only used by the logistics Provider to perform and provide the logistics services under XXXX Platform Cooperation Agreement (hereinafter referred to as the "Cooperation Agreement") and various product agreements. Without the prior written approval of XXXX, it shall not be used beyond the scope, nor shall it be provided to any third party in any form.
1.4 積極開展信息安全對接與信息安全檢查工作。
1.4 Actively carry out communication and inspection in information security.
1.5 物流商在信息系統發生重大安全事故時,立即采取應急措施,避免對消費者或XXXX業務造成持續影響。
1.5 In case of a major security accident in the information system, the logistics provider shall immediately take emergency measures to avoid continuous impact on consumers or XXXX's businesses.
1.6 建立信息安全責任制度,加強組織領導,設立信息安全第一責任人、負責人和聯系人,并明確各自的具體職責。物流商信息安全第一責任人、負責人和聯系人的相關資料見下表。如果信息安全負責人、聯系人發生變更的,應由物流商第一責任人聯系郵箱發出郵件通知XXXX。物流商信息安全聯系人應當保持7*24小時可聯系。
1.6 Establish information security responsibility system, strengthen organization and leadership, set up the first person in charge, the persons in charge and contact persons responsible for information security, and specify their responsibilities. The relevant information about such persons are seen in the table below. If the persons in charge and contact persons change, the first person in charge shall notify XXXX through email. The contact persons responsible for the information security of the logistics provider shall be available for 7 * 24 hours.
乙方保證其此處及后續向XXXX披露的責任人、聯系人個人信息的行為已獲得其本人的知情同意。
Party B guarantees that its disclosure of the personal information about the persons in charge and contact persons to XXXX currently and subsequently has obtained their consent.
1.1 乙方對接入XXXX的應用,應明確數據安全要求和責任,乙方需要對相關應用加強數據安全管理和保護。乙方應用發生數據安全事件對用戶造成損失的,乙方應當承擔部分或全部責任,除非乙方能夠證明無過錯。
1.7 Party B shall specify the data security requirements and responsibilities for the applications connected to XXXX, and also needs to strengthen data security management and protection of relevant applications. If a data security incident occurs in Party B's application and causes losses to users, Party B shall bear part or all of the responsibilities, unless Party B can prove that there is no fault.
1.2 XXXX鼓勵乙方自愿的通過國家或者行業認證和測評,包括但不限于:等級保護測評、GDPR認證、SOC2認證、滲透測試報告等;
1.8 XXXX encourages Party B to voluntarily pass national or industrial certification and assessment, including but not limited to: grade protection assessment, GDPR certification, SOC2 certification, and penetration test report, etc.;
1.3 乙方需要有安全責任人履行下列職責:
1.9 Party B needs to designate persons in charge of security to perform the following duties:
-組織制定數據安全保護計劃并督促落實;
- Organize the formulation of data security protection plan and supervise its implementation;
-組織開展數據安全風險評估,督促整改安全隱患;
- Organize and carry out data security risk assessment, as well as supervise and urge the rectification of potential security risks;
-在發生數據安全事件時,積極與XXXX方配合進行應急響應及事件處置。
- Actively cooperate with XXXX in emergency response and incident handling in case of data security incidents.
1.4 乙方從XXXX調取的數據,務必要保證數據的保密性,任何情況下,未經XXXX公司的書面確認,不得將XXXX數據以任何形式輸出給第三方;
1.10 Party B shall ensure the confidentiality of the data obtained from XXXX and shall not deliver such data to any third party in any form without written confirmation by XXXX Company under any circumstances;
專業英語翻譯公司推薦介紹:
玖九翻譯公司從創立至今,對英語翻譯售后服務的重視程度與日俱增,采取的是純粹的手工翻譯方式,我們將嚴格按照行業規范和合同要求提供翻譯服務,在項目成功后,我們會一直與客戶保持良好的關系,如果您認為我們的譯文質量不合格,請及時反饋,我們可以免費進行改進和完善,并且在項目結束后,我們會根據需要開具收據或者發票,客戶有什么問題可以隨時和我們溝通。
我們作為國內知名專業英語翻譯公司之一,始終秉承"立信求是、精益求精"的企業精神,堅持"誠信服務、顧客至上"的經營理念,我們專業的翻譯團隊和多年的翻譯經驗,贏得了眾多客戶的好評。已為多家世界500強企業提供翻譯服務。憑借著自身積累的資源,我們組成了一個較為完備的英語翻譯人才項目組,譯員大多都具有8年以上的行業專業翻譯經驗,并且均由有著資深行業背景知識和行業翻譯經驗,對行業有著比較深刻的理解,掌握著大量的最前沿的行業術語。
本公司是一家經過工商行政管理局注冊的具有涉外翻譯資格的優秀英語翻譯公司,并配備了一支專業的人力翻譯隊伍,本司英語翻譯專業譯員在英語方面均有5年以上的工作經驗。英語翻譯譯員均經專業培訓,其中大部分為海外學習或國外工作經驗,具備較強的英語翻譯技能。我司英語翻譯團隊的成員對行業發展、專業術語等有著深刻的理解,憑借著嚴謹的質量控制體系、規范化的操作程序、獨特的審稿標準,我們已經為許多著名的公司和機構提供了優質的英語翻譯服務。
如果您有翻譯方面的需求,歡迎致電專業翻譯公司玖九翻譯中心熱線:0731-86240899或者微信咨詢(QQ/微信同號:747700212),我們玖九翻譯中心將竭誠為您服務。