{"text_format":"1","workbook":"xlsx","n_sheets":14,"sheets":["Dashboard","Domain Progress","R01","R02","R03","R04","R05","R06","Lookup","Base-Lookup","Colour-Lookup","Breakdown","variables","old breaskdown"],"not_rendered":{"charts":2,"images":9,"macros":1,"external_links":5,"defined_names":22,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Dashboard","index":0,"n_rows":50,"n_cols":14,"rows_kept":50,"cut":false,"hidden":false,"merged":[[2,1,2,13],[3,1,3,13]]}
["DASHBOARD"]
[]
["Organisation"]
["Statement of Applicability"]
[]
[]
[]
["Report Date","Baseline","Target","Advanced",null,"CE","PSAP","PSN - ITHC","PCI-DSS","10 Steps","GDPR","HMG SPF","ISO 27001","NIS - CAF"]
[]
[{"$f":"INDIRECT($E10& \"!$D$2\")","v":"2019-06-07"},{"$f":"INDIRECT($E10& \"!R$5\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT($E10& \"!U$5\")","v":{"$error":"#NAME?"}},{"$f":"ragAdvanced($E10,INDIRECT($E10& \"!X$5\"))","v":{"$error":"#NAME?"}},"R01",{"$f":"INDIRECT(\"'\" & $E10 & \"'!Z$6\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(\"'\" & $E10 & \"'!AA$6\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(\"'\" & $E10 & \"'!AB$6\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(\"'\" & $E10 & \"'!AC$6\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(\"'\" & $E10 & \"'!AD$6\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(\"'\" & $E10 & \"'!AE$6\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(\"'\" & $E10 & \"'!AF$6\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(\"'\" & $E10 & \"'!AG$6\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(\"'\" & $E10 & \"'!AH$6\")","v":{"$error":"#NAME?"}}]
[{"$f":"INDIRECT($E11& \"!$D$2\")","v":"2019-06-12"},{"$f":"INDIRECT($E11& \"!R$5\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT($E11& \"!U$5\")","v":{"$error":"#NAME?"}},{"$f":"ragAdvanced($E11,INDIRECT($E11& \"!X$5\"))","v":{"$error":"#NAME?"}},"R02",{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[{"$f":"INDIRECT($E12& \"!$D$2\")","v":"2019-06-21"},{"$f":"INDIRECT($E12& \"!R$5\")","v":{"$error":"#NAME?"}},{"$f":"INDIRECT($E12& \"!U$5\")","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},"R03",{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
["2019-06-26",{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},"R04",{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$f":"INDIRECT(\"'\" & $E13 & \"'!AC$6\")","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
["2019-07-03",{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},"R05",{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
["2019-07-11",{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},"R06",{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[null,null,null,null,null,null,{"$f":"IF(INDEX(Breakdown!$Q:$Q,ROW())>0,\"P\",\"\")","v":""}]

{"sheet":"Domain Progress","index":1,"n_rows":25,"n_cols":13,"rows_kept":25,"cut":false,"hidden":false,"merged":[[19,12,21,12],[1,0,1,1],[4,12,6,12],[7,12,9,12],[10,12,12,12],[13,12,15,12],[16,12,18,12],[16,9,18,9],[16,10,18,10],[16,11,18,11],[19,9,21,9],[19,10,21,10],[19,11,21,11],[10,9,12,9],[10,10,12,10],[10,11,12,11],[13,9,15,9],[13,10,15,10],[13,11,15,11],[4,9,6,9],[4,10,6,10],[4,11,6,11],[7,9,9,9],[7,10,9,10],[7,11,9,11],[4,1,6,1],[4,2,6,2],[2,5,2,8],[7,1,9,1],[7,2,9,2],[19,1,21,1],[19,2,21,2],[10,1,12,1],[10,2,12,2],[13,1,15,1],[13,2,15,2],[16,1,18,1],[16,2,18,2]]}
[]
["Select Chart Date: ",null,"07/06/2019"]
[]
[null,"Report","Date","Stage",{"$f":"'Base-Lookup'!A2","v":"MANAGE"},{"$f":"'Base-Lookup'!A3","v":"PROTECT"},{"$f":"'Base-Lookup'!A4","v":"DETECT"},{"$f":"'Base-Lookup'!A5","v":"RESPOND & RECOVER"},null,{"$f":"E4","v":"MANAGE"},{"$f":"F4","v":"PROTECT"},"DETECT","RESPOND & RECOVER"]
[null,"R01",{"$f":"INDIRECT(B5 & \"!$D$2\")","v":"2019-06-07"},"Baseline",{"$f":"StageTotal($B5,E$4,$D5)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B5,F$4,$D5)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B5,G$4,$D5)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B5,H$4,$D5)","v":{"$error":"#NAME?"}},null,{"$f":"SUM(E5:E7)/3","v":{"$error":"#NAME?"}},{"$f":"SUM(F5:F7)/3","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[null,null,null,"Target",{"$f":"StageTotal($B5,E$4,$D6)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B5,F$4,$D6)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B5,G$4,$D6)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B5,H$4,$D6)","v":{"$error":"#NAME?"}}]
[null,null,null,"Advanced",{"$f":"StageTotal($B5,E$4,$D7)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B5,F$4,$D7)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B5,G$4,$D7)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B5,H$4,$D7)","v":{"$error":"#NAME?"}}]
[null,"R02",{"$f":"INDIRECT(B8 & \"!$D$2\")","v":"2019-06-12"},"Baseline",{"$f":"StageTotal(B$8,E$4,$D8)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$8,F$4,$D8)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$8,G$4,$D8)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$8,H$4,$D8)","v":{"$error":"#NAME?"}},null,{"$f":"SUM(E8:E10)/3","v":{"$error":"#NAME?"}},{"$f":"SUM(F8:F10)/3","v":{"$error":"#NAME?"}},{"$f":"SUM(G8:G10)/3","v":{"$error":"#NAME?"}},{"$f":"SUM(H8:H10)/3","v":{"$error":"#NAME?"}}]
[null,null,null,"Target",{"$f":"StageTotal(B$8,E$4,$D9)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$8,F$4,$D9)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[null,null,null,"Advanced",{"$f":"StageTotal(B$8,E$4,$D10)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[null,"R03",{"$f":"INDIRECT(B11 & \"!$D$2\")","v":"2019-06-21"},"Baseline",{"$f":"StageTotal(B$11,E$4,$D11)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B11,F$4,$D11)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B11,G$4,$D11)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B11,H$4,$D11)","v":{"$error":"#NAME?"}},null,{"$f":"SUM(E11:E13)/3","v":{"$error":"#NAME?"}},{"$f":"SUM(F11:F13)/3","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$f":"SUM(H11:H13)/3","v":{"$error":"#NAME?"}}]
[null,null,null,"Target",{"$f":"StageTotal(B$11,E$4,$D12)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$11,F$4,$D12)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$11,G$4,$D12)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"}]
[null,null,null,"Advanced",{"$f":"StageTotal(B$11,E$4,$D13)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$11,F$4,$D13)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[null,"R04",{"$f":"INDIRECT(B14 & \"!$D$2\")","v":"2019-06-26"},"Baseline",{"$f":"StageTotal(B$14,E$4,$D14)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$14,F$4,$D14)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$14,G$4,$D14)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$14,H$4,$D14)","v":{"$error":"#NAME?"}},null,{"$f":"SUM(E14:E16)/3","v":{"$error":"#NAME?"}},{"$f":"SUM(F14:F16)/3","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$f":"SUM(H14:H16)/3","v":{"$error":"#NAME?"}}]
[null,null,null,"Target",{"$f":"StageTotal(B$14,E$4,$D15)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$14,F$4,$D15)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[null,null,null,"Advanced",{"$f":"StageTotal(B$14,E$4,$D16)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[null,"R05",{"$f":"INDIRECT(B17 & \"!$D$2\")","v":"2019-07-03"},"Baseline",{"$f":"StageTotal(B$17,E$4,$D17)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$17,F$4,$D17)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$17,G$4,$D17)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$17,H$4,$D17)","v":{"$error":"#NAME?"}},null,{"$f":"SUM(E17:E19)/3","v":{"$error":"#NAME?"}},{"$f":"SUM(F17:F19)/3","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$f":"SUM(H17:H19)/3","v":{"$error":"#NAME?"}}]
[null,null,null,"Target",{"$f":"StageTotal(B$17,E$4,$D18)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$17,F$4,$D18)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[null,null,null,"Advanced",{"$f":"StageTotal(B$17,E$4,$D19)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[null,"R06",{"$f":"INDIRECT(B20 & \"!$D$2\")","v":"2019-07-11"},"Baseline",{"$f":"StageTotal(B$20,E$4,$D20)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$20,F$4,$D20)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$20,G$4,$D20)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$20,H$4,$D20)","v":{"$error":"#NAME?"}},null,{"$f":"SUM(E20:E22)/3","v":{"$error":"#NAME?"}},{"$f":"SUM(F20:F22)/3","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$f":"SUM(H20:H22)/3","v":{"$error":"#NAME?"}}]
[null,null,null,"Target",{"$f":"StageTotal(B$20,E$4,$D21)","v":{"$error":"#NAME?"}},{"$f":"StageTotal($B$20,F$4,$D21)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[null,null,null,"Advanced",{"$f":"StageTotal(B$20,E$4,$D22)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[]
[null,"Date",{"$f":"E4","v":"MANAGE"},{"$f":"F4","v":"PROTECT"},"DETECT","RESPOND & RECOVER",null,"Baseline","Baseline","Target","Advanced"]
[null,{"$f":"C2","v":"07/06/2019"},{"$f":"INDIRECT(ADDRESS(2+3*MATCH(TEXT($C$2,\"dd/mm/yyyy\"),Lookup!$D$104:$D$109,0),10))","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(ADDRESS(2+3*MATCH(TEXT($C$2,\"dd/mm/yyyy\"),Lookup!$D$104:$D$109,0),11))","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(ADDRESS(2+3*MATCH(TEXT($C$2,\"dd/mm/yyyy\"),Lookup!$D$104:$D$109,0),12))","v":{"$error":"#NAME?"}},{"$f":"INDIRECT(ADDRESS(2+3*MATCH(TEXT($C$2,\"dd/mm/yyyy\"),Lookup!$D$104:$D$109,0),13))","v":{"$error":"#NAME?"}},null,null,null,{"$f":"1/3","v":0.33333333333333331},{"$f":"2/3","v":0.66666666666666663}]

{"sheet":"R01","index":2,"n_rows":101,"n_cols":35,"rows_kept":101,"cut":false,"hidden":false,"merged":[[5,3,5,12],[1,3,1,12],[2,3,2,12],[2,17,2,23],[3,3,3,12],[4,2,4,11],[6,3,6,12],[7,0,26,0],[7,16,7,17],[7,19,7,20],[7,22,7,23],[13,16,13,17],[13,19,13,20],[13,22,13,23],[18,16,18,17],[18,19,18,20],[18,22,18,23],[23,16,23,17],[23,19,23,20],[23,22,23,23],[27,0,84,0],[27,16,27,17],[27,19,27,20],[27,22,27,23],[34,16,34,17],[34,19,34,20],[34,22,34,23],[40,16,40,17],[40,19,40,20],[40,22,40,23],[42,16,42,17],[42,19,42,20],[42,22,42,23],[47,16,47,17],[47,19,47,20],[47,22,47,23],[52,16,52,17],[52,19,52,20],[52,22,52,23],[55,16,55,17],[55,19,55,20],[55,22,55,23],[58,16,58,17],[58,19,58,20],[58,22,58,23],[63,16,63,17],[63,19,63,20],[63,22,63,23],[74,16,74,17],[74,19,74,20],[74,22,74,23],[93,22,93,23],[100,13,100,24],[85,0,87,0],[85,16,85,17],[85,19,85,20],[85,22,85,23],[88,0,99,0],[88,16,88,17],[88,19,88,20],[88,22,88,23],[93,16,93,17],[93,19,93,20]]}
[null,null,"Report 1"]
[null,null,"Report Date:","2019-06-07"]
[null,null,"Assessor:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"RAG Status"]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,5,null,"PSAP",null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[]
["MANAGE",null,"ORGANISATIONAL GOVERNANCE",null,null,"N/A","0",1,2,3,4,5,"Scored",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C9),Lookup!$E$9:$E$100,0))","v":1},"Governance framework",{"$f":"Lookup!F9","v":"2a"},null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q9<>\"P\",0,mySWITCH(INT($M9),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,"P",{"$f":"IF($W9<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M9))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C10),Lookup!$E$9:$E$100,0))","v":1},"Leadership & responsibility",{"$f":"Lookup!F10","v":"2b"},null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q10<>\"P\",0,mySWITCH(INT($M10),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T10<>\"P\",0,pcOfTargetAchieved(ROW(),$M10))","v":0},null,"P",{"$f":"IF($W10<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M10))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C11),Lookup!$E$9:$E$100,0))","v":1},"Adoption of assurance standards",{"$f":"Lookup!F11","v":"2e"},null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q11<>\"P\",0,mySWITCH(INT($M11),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T11<>\"P\",0,pcOfTargetAchieved(ROW(),$M11))","v":0},null,"P",{"$f":"IF($W11<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M11))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C12),Lookup!$E$9:$E$100,0))","v":1},"Information Asset Register",{"$f":"Lookup!F12","v":"2f"},null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q12<>\"P\",0,mySWITCH(INT($M12),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T12<>\"P\",0,pcOfTargetAchieved(ROW(),$M12))","v":0},null,"P",{"$f":"IF($W12<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M12))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C13),Lookup!$E$9:$E$100,0))","v":1},"Audit/assurance compliance",{"$f":"Lookup!F13","v":"2g"},null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q13<>\"P\",0,mySWITCH(INT($M13),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T13<>\"P\",0,pcOfTargetAchieved(ROW(),$M13))","v":0},null,"P",{"$f":"IF($W13<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M13))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"RISK MANAGEMENT",null,null,null,"0",1,2,3,4,5,null,null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C15),Lookup!$E$9:$E$100,0))","v":1},"Risk management policy & process","11a",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q15<>\"P\",0,mySWITCH(INT($M15),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T15<>\"P\",0,pcOfTargetAchieved(ROW(),$M15))","v":0},null,"P",{"$f":"IF($W15<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M15))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C16),Lookup!$E$9:$E$100,0))","v":1},"Cyber / Information Risk Assessment","11b",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q16<>\"P\",0,mySWITCH(INT($M16),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T16<>\"P\",0,pcOfTargetAchieved(ROW(),$M16))","v":0},null,"P",{"$f":"IF($W16<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M16))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C17),Lookup!$E$9:$E$100,0))","v":1},"Risk treatment & tolerance","11c",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q17<>\"P\",0,mySWITCH(INT($M17),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T17<>\"P\",0,pcOfTargetAchieved(ROW(),$M17))","v":0},null,"P",{"$f":"IF($W17<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M17))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C18),Lookup!$E$9:$E$100,0))","v":1},"Risk governance","11d",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q18<>\"P\",0,mySWITCH(INT($M18),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T18<>\"P\",0,pcOfTargetAchieved(ROW(),$M18))","v":0},null,"P",{"$f":"IF($W18<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M18))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"SUPPLIER MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C20),Lookup!$E$9:$E$100,0))","v":1},"Supply chain security assurance & management","9a",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q20<>\"P\",0,mySWITCH(INT($M20),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T20<>\"P\",0,pcOfTargetAchieved(ROW(),$M20))","v":0},null,null,{"$f":"IF($W20<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M20))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C21),Lookup!$E$9:$E$100,0))","v":1},"Roles & responsibilities defined","9b",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q21<>\"P\",0,mySWITCH(INT($M21),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T21<>\"P\",0,pcOfTargetAchieved(ROW(),$M21))","v":0},null,"P",{"$f":"IF($W21<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M21))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C22),Lookup!$E$9:$E$100,0))","v":1},"Access control","9c",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q22<>\"P\",0,mySWITCH(INT($M22),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T22<>\"P\",0,pcOfTargetAchieved(ROW(),$M22))","v":0},null,"P",{"$f":"IF($W22<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M22))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C23),Lookup!$E$9:$E$100,0))","v":1},"Security in system procurements","9d",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q23<>\"P\",0,mySWITCH(INT($M23),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T23<>\"P\",0,pcOfTargetAchieved(ROW(),$M23))","v":0},null,"P",{"$f":"IF($W23<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M23))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"ASSET MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C25),Lookup!$E$9:$E$100,0))","v":1},"Hardware assets register & management",{"$f":"Lookup!$F25","v":"4a"},null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q25<>\"P\",0,mySWITCH(INT($M25),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T25<>\"P\",0,pcOfTargetAchieved(ROW(),$M25))","v":0},null,"P",{"$f":"IF($W25<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M25))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C26),Lookup!$E$9:$E$100,0))","v":1},"Software assets register & management",{"$f":"Lookup!$F26","v":"4b"},null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q26<>\"P\",0,mySWITCH(INT($M26),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T26<>\"P\",0,pcOfTargetAchieved(ROW(),$M26))","v":0},null,"P",{"$f":"IF($W26<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M26))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C27),Lookup!$E$9:$E$100,0))","v":1},"Infrastructure management",{"$f":"Lookup!$F27","v":"4c"},null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q27<>\"P\",0,mySWITCH(INT($M27),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T27<>\"P\",0,pcOfTargetAchieved(ROW(),$M27))","v":0},null,"P",{"$f":"IF($W27<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M27))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["PROTECT",null,"INFORMATION SECURITY MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C29),Lookup!$E$9:$E$100,0))","v":2},"Security policy & processes","1a",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q29<>\"P\",0,mySWITCH(INT($M29),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T29<>\"P\",0,pcOfTargetAchieved(ROW(),$M29))","v":0},null,"P",{"$f":"IF($W29<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M29))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C30),Lookup!$E$9:$E$100,0))","v":2},"Lifecycle management","1b",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q30<>\"P\",0,mySWITCH(INT($M30),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T30<>\"P\",0,pcOfTargetAchieved(ROW(),$M30))","v":0},null,"P",{"$f":"IF($W30<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M30))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Storage","1c",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q31<>\"P\",0,mySWITCH(INT($M31),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T31<>\"P\",0,pcOfTargetAchieved(ROW(),$M31))","v":0},null,"P",{"$f":"IF($W31<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M31))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data classification","1f",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q32<>\"P\",0,mySWITCH(INT($M32),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T32<>\"P\",0,pcOfTargetAchieved(ROW(),$M32))","v":0},null,"P",{"$f":"IF($W32<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M32))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Information assets register","1g",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q33<>\"P\",0,mySWITCH(INT($M33),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T33<>\"P\",0,pcOfTargetAchieved(ROW(),$M33))","v":0},null,"P",{"$f":"IF($W33<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M33))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data transfer controls","1h",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q34<>\"P\",0,mySWITCH(INT($M34),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T34<>\"P\",0,pcOfTargetAchieved(ROW(),$M34))","v":0},null,"P",{"$f":"IF($W34<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M34))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PEOPLE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Prior to employment","13a",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q36<>\"P\",0,mySWITCH(INT($M36),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T36<>\"P\",0,pcOfTargetAchieved(ROW(),$M36))","v":0},null,"P",{"$f":"IF($W36<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M36))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C37),Lookup!$E$9:$E$100,0))","v":2},"During employment","13d",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q37<>\"P\",0,mySWITCH(INT($M37),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T37<>\"P\",0,pcOfTargetAchieved(ROW(),$M37))","v":0},null,"P",{"$f":"IF($W37<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M37))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & awareness culture","13i",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q38<>\"P\",0,mySWITCH(INT($M38),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T38<>\"P\",0,pcOfTargetAchieved(ROW(),$M38))","v":0},null,"P",{"$f":"IF($W38<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M38))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff skills assessment","13j",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q39<>\"P\",0,mySWITCH(INT($M39),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T39<>\"P\",0,pcOfTargetAchieved(ROW(),$M39))","v":0},null,"P",{"$f":"IF($W39<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M39))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Mobile/remote working policy","13o",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q40<>\"P\",0,mySWITCH(INT($M40),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T40<>\"P\",0,pcOfTargetAchieved(ROW(),$M40))","v":0},null,"P",{"$f":"IF($W40<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M40))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C41),Lookup!$D$9:$D$100,0))","v":0},"SERVICES RESILIENCE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Services Resilience","17a",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q42<>\"P\",0,mySWITCH(INT($M42),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T42<>\"P\",0,pcOfTargetAchieved(ROW(),$M42))","v":0},null,"P",{"$f":"IF($W42<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M42))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C43),Lookup!$D$9:$D$100,0))","v":0},"ACCESS CONTROL",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Account management","3a",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q44<>\"P\",0,mySWITCH(INT($M44),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T44<>\"P\",0,pcOfTargetAchieved(ROW(),$M44))","v":0},null,null,{"$f":"IF($W44<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M44))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C45),Lookup!$E$9:$E$100,0))","v":2},"Identity authentication","3b",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q45<>\"P\",0,mySWITCH(INT($M45),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T45<>\"P\",0,pcOfTargetAchieved(ROW(),$M45))","v":0},null,"P",{"$f":"IF($W45<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M45))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C46),Lookup!$E$9:$E$100,0))","v":2},"Privilege management","3e",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q46<>\"P\",0,mySWITCH(INT($M46),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T46<>\"P\",0,pcOfTargetAchieved(ROW(),$M46))","v":0},null,"P",{"$f":"IF($W46<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M46))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C47),Lookup!$E$9:$E$100,0))","v":2},"Administrator account management","3f",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q47<>\"P\",0,mySWITCH(INT($M47),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T47<>\"P\",0,pcOfTargetAchieved(ROW(),$M47))","v":0},null,"P",{"$f":"IF($W47<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M47))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"MEDIA MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Storage media management","14a",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q49<>\"P\",0,mySWITCH(INT($M49),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T49<>\"P\",0,pcOfTargetAchieved(ROW(),$M49))","v":0},null,"P",{"$f":"IF($W49<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M49))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C50),Lookup!$E$9:$E$100,0))","v":2},"Mobile media/devices","14b",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q50<>\"P\",0,mySWITCH(INT($M50),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T50<>\"P\",0,pcOfTargetAchieved(ROW(),$M50))","v":0},null,"P",{"$f":"IF($W50<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M50))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C51),Lookup!$E$9:$E$100,0))","v":2},"Cryptography","14c",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q51<>\"P\",0,mySWITCH(INT($M51),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T51<>\"P\",0,pcOfTargetAchieved(ROW(),$M51))","v":0},null,"P",{"$f":"IF($W51<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M51))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C52),Lookup!$E$9:$E$100,0))","v":2},"Remote wipe capability","14d",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q52<>\"P\",0,mySWITCH(INT($M52),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T52<>\"P\",0,pcOfTargetAchieved(ROW(),$M52))","v":0},null,null,{"$f":"IF($W52<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M52))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ENVIRONMENTAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Equipment location","15a",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q54<>\"P\",0,mySWITCH(INT($M54),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T54<>\"P\",0,pcOfTargetAchieved(ROW(),$M54))","v":0},null,"P",{"$f":"IF($W54<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M54))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C55),Lookup!$E$9:$E$100,0))","v":2},"Power resilience","15b",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q55<>\"P\",0,mySWITCH(INT($M55),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T55<>\"P\",0,pcOfTargetAchieved(ROW(),$M55))","v":0},null,"P",{"$f":"IF($W55<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M55))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PHYSICAL/BUILDING SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Access control","5a",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q57<>\"P\",0,mySWITCH(INT($M57),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T57<>\"P\",0,pcOfTargetAchieved(ROW(),$M57))","v":0},null,"P",{"$f":"IF($W57<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M57))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C58),Lookup!$E$9:$E$100,0))","v":2},"Internal security","5b",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q58<>\"P\",0,mySWITCH(INT($M58),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T58<>\"P\",0,pcOfTargetAchieved(ROW(),$M58))","v":0},null,"P",{"$f":"IF($W58<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M58))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SYSTEM MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Secure configuration  ","6c",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q60<>\"P\",0,mySWITCH(INT($M60),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T60<>\"P\",0,pcOfTargetAchieved(ROW(),$M60))","v":0},null,"P",{"$f":"IF($W60<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M60))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C61),Lookup!$E$9:$E$100,0))","v":2},"Secure design/development","6d",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q61<>\"P\",0,mySWITCH(INT($M61),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T61<>\"P\",0,pcOfTargetAchieved(ROW(),$M61))","v":0},null,"P",{"$f":"IF($W61<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M61))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C62),Lookup!$E$9:$E$100,0))","v":2},"Change control procedures","6e",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q62<>\"P\",0,mySWITCH(INT($M62),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T62<>\"P\",0,pcOfTargetAchieved(ROW(),$M62))","v":0},null,"P",{"$f":"IF($W62<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M62))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C63),Lookup!$E$9:$E$100,0))","v":2},"System Testing","6f",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q63<>\"P\",0,mySWITCH(INT($M63),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T63<>\"P\",0,pcOfTargetAchieved(ROW(),$M63))","v":0},null,"P",{"$f":"IF($W63<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M63))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"OPERATIONAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Malware policies & protection","7a",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q65<>\"P\",0,mySWITCH(INT($M65),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T65<>\"P\",0,pcOfTargetAchieved(ROW(),$M65))","v":0},null,null,{"$f":"IF($W65<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M65))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C66),Lookup!$E$9:$E$100,0))","v":2},"Email security","7e",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q66<>\"P\",0,mySWITCH(INT($M66),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T66<>\"P\",0,pcOfTargetAchieved(ROW(),$M66))","v":0},null,null,{"$f":"IF($W66<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M66))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C67),Lookup!$E$9:$E$100,0))","v":2},"Application security","7f",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q67<>\"P\",0,mySWITCH(INT($M67),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T67<>\"P\",0,pcOfTargetAchieved(ROW(),$M67))","v":0},null,"",{"$f":"IF($W67<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M67))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C68),Lookup!$E$9:$E$100,0))","v":2},"Vulnerability management & scanning","7h",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q68<>\"P\",0,mySWITCH(INT($M68),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T68<>\"P\",0,pcOfTargetAchieved(ROW(),$M68))","v":0},null,"P",{"$f":"IF($W68<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M68))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C69),Lookup!$E$9:$E$100,0))","v":2},"Data exfiltration monitoring","7k",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q69<>\"P\",0,mySWITCH(INT($M69),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T69<>\"P\",0,pcOfTargetAchieved(ROW(),$M69))","v":0},null,null,{"$f":"IF($W69<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M69))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C70),Lookup!$E$9:$E$100,0))","v":2},"Software supported & updated","7l",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q70<>\"P\",0,mySWITCH(INT($M70),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T70<>\"P\",0,pcOfTargetAchieved(ROW(),$M70))","v":0},null,"P",{"$f":"IF($W70<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M70))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C71),Lookup!$E$9:$E$100,0))","v":2},"Web site screening","7m",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q71<>\"P\",0,mySWITCH(INT($M71),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T71<>\"P\",0,pcOfTargetAchieved(ROW(),$M71))","v":0},null,"",{"$f":"IF($W71<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M71))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C72),Lookup!$E$9:$E$100,0))","v":2},"Browser management","7n",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q72<>\"P\",0,mySWITCH(INT($M72),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T72<>\"P\",0,pcOfTargetAchieved(ROW(),$M72))","v":0},null,"",{"$f":"IF($W72<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M72))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C73),Lookup!$E$9:$E$100,0))","v":2},"Monitor/audit user activity","7o",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q73<>\"P\",0,mySWITCH(INT($M73),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T73<>\"P\",0,pcOfTargetAchieved(ROW(),$M73))","v":0},null,"P",{"$f":"IF($W73<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M73))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C74),Lookup!$E$9:$E$100,0))","v":2},"Disabled auto-run","7p",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q74<>\"P\",0,mySWITCH(INT($M74),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T74<>\"P\",0,pcOfTargetAchieved(ROW(),$M74))","v":0},null,"",{"$f":"IF($W74<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M74))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"NETWORK SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Patch management","8a",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q76<>\"P\",0,mySWITCH(INT($M76),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T76<>\"P\",0,pcOfTargetAchieved(ROW(),$M76))","v":0},null,null,{"$f":"IF($W76<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M76))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Device management","8b",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q77<>\"P\",0,mySWITCH(INT($M77),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T77<>\"P\",0,pcOfTargetAchieved(ROW(),$M77))","v":0},null,"P",{"$f":"IF($W77<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M77))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Content screening","8c",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q78<>\"P\",0,mySWITCH(INT($M78),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T78<>\"P\",0,pcOfTargetAchieved(ROW(),$M78))","v":0},null,null,{"$f":"IF($W78<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M78))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Internal segregation","8d",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q79<>\"P\",0,mySWITCH(INT($M79),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T79<>\"P\",0,pcOfTargetAchieved(ROW(),$M79))","v":0},null,"P",{"$f":"IF($W79<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M79))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Wireless security","8e",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q80<>\"P\",0,mySWITCH(INT($M80),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T80<>\"P\",0,pcOfTargetAchieved(ROW(),$M80))","v":0},null,"",{"$f":"IF($W80<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M80))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Boundary/Firewall management","8f",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q81<>\"P\",0,mySWITCH(INT($M81),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T81<>\"P\",0,pcOfTargetAchieved(ROW(),$M81))","v":0},null,"P",{"$f":"IF($W81<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M81))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Administrator control","8g",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q82<>\"P\",0,mySWITCH(INT($M82),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T82<>\"P\",0,pcOfTargetAchieved(ROW(),$M82))","v":0},null,"P",{"$f":"IF($W82<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M82))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Error message management","8h",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q83<>\"P\",0,mySWITCH(INT($M83),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T83<>\"P\",0,pcOfTargetAchieved(ROW(),$M83))","v":0},null,"",{"$f":"IF($W83<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M83))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Penetration testing","8i",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q84<>\"P\",0,mySWITCH(INT($M84),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T84<>\"P\",0,pcOfTargetAchieved(ROW(),$M84))","v":0},null,null,{"$f":"IF($W84<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M84))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"IP & DNS management","8j",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q85<>\"P\",0,mySWITCH(INT($M85),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T85<>\"P\",0,pcOfTargetAchieved(ROW(),$M85))","v":0},null,"P",{"$f":"IF($W85<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M85))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["DETECT",null,"INCIDENT DETECTION",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Detection capability","16a",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q87<>\"P\",0,mySWITCH(INT($M87),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T87<>\"P\",0,pcOfTargetAchieved(ROW(),$M87))","v":0},null,"P",{"$f":"IF($W87<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M87))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Security Monitoring","16b",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q88<>\"P\",0,mySWITCH(INT($M88),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T88<>\"P\",0,pcOfTargetAchieved(ROW(),$M88))","v":0},null,"P",{"$f":"IF($W88<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M88))","v":0},null,0,0,0,0,0,0,0,0,0]
["RESPOND & RECOVER",null,"INCIDENT MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Incident response protocol","10b",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q90<>\"P\",0,mySWITCH(INT($M90),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T90<>\"P\",0,pcOfTargetAchieved(ROW(),$M90))","v":0},null,"P",{"$f":"IF($W90<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M90))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Incident reporting procedure","10c",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q91<>\"P\",0,mySWITCH(INT($M91),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T91<>\"P\",0,pcOfTargetAchieved(ROW(),$M91))","v":0},null,null,{"$f":"IF($W91<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M91))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & testing","10d",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q92<>\"P\",0,mySWITCH(INT($M92),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T92<>\"P\",0,pcOfTargetAchieved(ROW(),$M92))","v":0},null,null,{"$f":"IF($W92<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M92))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Post-incident review & learning","10e",null,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q93<>\"P\",0,mySWITCH(INT($M93),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T93<>\"P\",0,pcOfTargetAchieved(ROW(),$M93))","v":0},null,"P",{"$f":"IF($W93<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M93))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BUSINESS CONTINUITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Data recover capability","12a",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q95<>\"P\",0,mySWITCH(INT($M95),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T95<>\"P\",0,pcOfTargetAchieved(ROW(),$M95))","v":0},null,"P",{"$f":"IF($W95<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M95))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Back up policies & procedures","12b",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q96<>\"P\",0,mySWITCH(INT($M96),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T96<>\"P\",0,pcOfTargetAchieved(ROW(),$M96))","v":0},null,"P",{"$f":"IF($W96<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M96))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Disaster recovery policies & procedures","12c",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q97<>\"P\",0,mySWITCH(INT($M97),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T97<>\"P\",0,pcOfTargetAchieved(ROW(),$M97))","v":0},null,"P",{"$f":"IF($W97<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M97))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC/DR testing policies & procedures","12d",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q98<>\"P\",0,mySWITCH(INT($M98),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T98<>\"P\",0,pcOfTargetAchieved(ROW(),$M98))","v":0},null,"P",{"$f":"IF($W98<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M98))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Data Loss impact assessments","12e",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q99<>\"P\",0,mySWITCH(INT($M99),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T99<>\"P\",0,pcOfTargetAchieved(ROW(),$M99))","v":0},null,"P",{"$f":"IF($W99<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M99))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC contingency plan","12f",null,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q100<>\"P\",0,mySWITCH(INT($M100),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T100<>\"P\",0,pcOfTargetAchieved(ROW(),$M100))","v":0},null,"P",{"$f":"IF($W100<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M100))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,"OVERALL TOTALS"]

{"sheet":"R02","index":3,"n_rows":101,"n_cols":35,"rows_kept":101,"cut":false,"hidden":false,"merged":[[5,3,5,12],[1,3,1,12],[2,3,2,12],[2,17,2,23],[3,3,3,12],[4,2,4,11],[6,3,6,12],[7,0,26,0],[7,16,7,17],[7,19,7,20],[7,22,7,23],[13,16,13,17],[13,19,13,20],[13,22,13,23],[18,16,18,17],[18,19,18,20],[18,22,18,23],[23,16,23,17],[23,19,23,20],[23,22,23,23],[27,0,84,0],[27,16,27,17],[27,19,27,20],[27,22,27,23],[34,16,34,17],[34,19,34,20],[34,22,34,23],[40,16,40,17],[40,19,40,20],[40,22,40,23],[42,16,42,17],[42,19,42,20],[42,22,42,23],[47,16,47,17],[47,19,47,20],[47,22,47,23],[52,16,52,17],[52,19,52,20],[52,22,52,23],[55,16,55,17],[55,19,55,20],[55,22,55,23],[58,16,58,17],[58,19,58,20],[58,22,58,23],[63,16,63,17],[63,19,63,20],[63,22,63,23],[74,16,74,17],[74,19,74,20],[74,22,74,23],[93,22,93,23],[100,13,100,24],[85,0,87,0],[85,16,85,17],[85,19,85,20],[85,22,85,23],[88,0,99,0],[88,16,88,17],[88,19,88,20],[88,22,88,23],[93,16,93,17],[93,19,93,20]]}
[null,null,"Report 2"]
[null,null,"Report Date:","2019-06-12"]
[null,null,"Assessor:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"RAG Status"]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,5,null,"ISO 27001",null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[]
["MANAGE",null,"ORGANISATIONAL GOVERNANCE",null,null,"N/A","0",1,2,3,4,5,"Scored",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C9),Lookup!$E$9:$E$100,0))","v":1},"Governance framework",{"$f":"Lookup!F9","v":"2a"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q9<>\"P\",0,mySWITCH(INT($M9),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C10),Lookup!$E$9:$E$100,0))","v":1},"Leadership & responsibility",{"$f":"Lookup!F10","v":"2b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q10<>\"P\",0,mySWITCH(INT($M10),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T10<>\"P\",0,pcOfTargetAchieved(ROW(),$M10))","v":0},null,"P",{"$f":"IF($W10<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M10))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C11),Lookup!$E$9:$E$100,0))","v":1},"Adoption of assurance standards",{"$f":"Lookup!F11","v":"2e"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q11<>\"P\",0,mySWITCH(INT($M11),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T11<>\"P\",0,pcOfTargetAchieved(ROW(),$M11))","v":0},null,"P",{"$f":"IF($W11<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M11))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C12),Lookup!$E$9:$E$100,0))","v":1},"Information Asset Register",{"$f":"Lookup!F12","v":"2f"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q12<>\"P\",0,mySWITCH(INT($M12),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T12<>\"P\",0,pcOfTargetAchieved(ROW(),$M12))","v":0},null,"P",{"$f":"IF($W12<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M12))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C13),Lookup!$E$9:$E$100,0))","v":1},"Audit/assurance compliance",{"$f":"Lookup!F13","v":"2g"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q13<>\"P\",0,mySWITCH(INT($M13),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T13<>\"P\",0,pcOfTargetAchieved(ROW(),$M13))","v":0},null,"P",{"$f":"IF($W13<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M13))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"RISK MANAGEMENT",null,null,null,"0",1,2,3,4,5,null,null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C15),Lookup!$E$9:$E$100,0))","v":1},"Risk management policy & process","11a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q15<>\"P\",0,mySWITCH(INT($M15),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T15<>\"P\",0,pcOfTargetAchieved(ROW(),$M15))","v":0},null,"P",{"$f":"IF($W15<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M15))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C16),Lookup!$E$9:$E$100,0))","v":1},"Cyber / Information Risk Assessment","11b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q16<>\"P\",0,mySWITCH(INT($M16),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T16<>\"P\",0,pcOfTargetAchieved(ROW(),$M16))","v":0},null,"P",{"$f":"IF($W16<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M16))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C17),Lookup!$E$9:$E$100,0))","v":1},"Risk treatment & tolerance","11c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q17<>\"P\",0,mySWITCH(INT($M17),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T17<>\"P\",0,pcOfTargetAchieved(ROW(),$M17))","v":0},null,"P",{"$f":"IF($W17<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M17))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C18),Lookup!$E$9:$E$100,0))","v":1},"Risk governance","11d",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q18<>\"P\",0,mySWITCH(INT($M18),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T18<>\"P\",0,pcOfTargetAchieved(ROW(),$M18))","v":0},null,"P",{"$f":"IF($W18<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M18))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"SUPPLIER MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C20),Lookup!$E$9:$E$100,0))","v":1},"Supply chain security assurance & management","9a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q20<>\"P\",0,mySWITCH(INT($M20),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T20<>\"P\",0,pcOfTargetAchieved(ROW(),$M20))","v":0},null,null,{"$f":"IF($W20<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M20))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C21),Lookup!$E$9:$E$100,0))","v":1},"Roles & responsibilities defined","9b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q21<>\"P\",0,mySWITCH(INT($M21),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T21<>\"P\",0,pcOfTargetAchieved(ROW(),$M21))","v":0},null,"P",{"$f":"IF($W21<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M21))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C22),Lookup!$E$9:$E$100,0))","v":1},"Access control","9c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q22<>\"P\",0,mySWITCH(INT($M22),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T22<>\"P\",0,pcOfTargetAchieved(ROW(),$M22))","v":0},null,"P",{"$f":"IF($W22<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M22))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C23),Lookup!$E$9:$E$100,0))","v":1},"Security in system procurements","9d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q23<>\"P\",0,mySWITCH(INT($M23),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T23<>\"P\",0,pcOfTargetAchieved(ROW(),$M23))","v":0},null,"P",{"$f":"IF($W23<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M23))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"ASSET MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C25),Lookup!$E$9:$E$100,0))","v":1},"Hardware assets register & management",{"$f":"Lookup!$F25","v":"4a"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q25<>\"P\",0,mySWITCH(INT($M25),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T25<>\"P\",0,pcOfTargetAchieved(ROW(),$M25))","v":0},null,"P",{"$f":"IF($W25<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M25))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C26),Lookup!$E$9:$E$100,0))","v":1},"Software assets register & management",{"$f":"Lookup!$F26","v":"4b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q26<>\"P\",0,mySWITCH(INT($M26),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T26<>\"P\",0,pcOfTargetAchieved(ROW(),$M26))","v":0},null,"P",{"$f":"IF($W26<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M26))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C27),Lookup!$E$9:$E$100,0))","v":1},"Infrastructure management",{"$f":"Lookup!$F27","v":"4c"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q27<>\"P\",0,mySWITCH(INT($M27),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T27<>\"P\",0,pcOfTargetAchieved(ROW(),$M27))","v":0},null,"P",{"$f":"IF($W27<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M27))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["PROTECT",null,"INFORMATION SECURITY MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C29),Lookup!$E$9:$E$100,0))","v":2},"Security policy & processes","1a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q29<>\"P\",0,mySWITCH(INT($M29),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T29<>\"P\",0,pcOfTargetAchieved(ROW(),$M29))","v":0},null,"P",{"$f":"IF($W29<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M29))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C30),Lookup!$E$9:$E$100,0))","v":2},"Lifecycle management","1b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q30<>\"P\",0,mySWITCH(INT($M30),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T30<>\"P\",0,pcOfTargetAchieved(ROW(),$M30))","v":0},null,"P",{"$f":"IF($W30<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M30))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Storage","1c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q31<>\"P\",0,mySWITCH(INT($M31),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T31<>\"P\",0,pcOfTargetAchieved(ROW(),$M31))","v":0},null,"P",{"$f":"IF($W31<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M31))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data classification","1f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q32<>\"P\",0,mySWITCH(INT($M32),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T32<>\"P\",0,pcOfTargetAchieved(ROW(),$M32))","v":0},null,"P",{"$f":"IF($W32<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M32))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Information assets register","1g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q33<>\"P\",0,mySWITCH(INT($M33),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T33<>\"P\",0,pcOfTargetAchieved(ROW(),$M33))","v":0},null,"P",{"$f":"IF($W33<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M33))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data transfer controls","1h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q34<>\"P\",0,mySWITCH(INT($M34),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T34<>\"P\",0,pcOfTargetAchieved(ROW(),$M34))","v":0},null,"P",{"$f":"IF($W34<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M34))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PEOPLE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Prior to employment","13a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q36<>\"P\",0,mySWITCH(INT($M36),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T36<>\"P\",0,pcOfTargetAchieved(ROW(),$M36))","v":0},null,"P",{"$f":"IF($W36<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M36))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C37),Lookup!$E$9:$E$100,0))","v":2},"During employment","13d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q37<>\"P\",0,mySWITCH(INT($M37),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T37<>\"P\",0,pcOfTargetAchieved(ROW(),$M37))","v":0},null,"P",{"$f":"IF($W37<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M37))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & awareness culture","13i",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q38<>\"P\",0,mySWITCH(INT($M38),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T38<>\"P\",0,pcOfTargetAchieved(ROW(),$M38))","v":0},null,"P",{"$f":"IF($W38<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M38))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff skills assessment","13j",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q39<>\"P\",0,mySWITCH(INT($M39),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T39<>\"P\",0,pcOfTargetAchieved(ROW(),$M39))","v":0},null,"P",{"$f":"IF($W39<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M39))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Mobile/remote working policy","13o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q40<>\"P\",0,mySWITCH(INT($M40),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T40<>\"P\",0,pcOfTargetAchieved(ROW(),$M40))","v":0},null,"P",{"$f":"IF($W40<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M40))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SERVICES RESILIENCE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Services Resilience","17a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q42<>\"P\",0,mySWITCH(INT($M42),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T42<>\"P\",0,pcOfTargetAchieved(ROW(),$M42))","v":0},null,"P",{"$f":"IF($W42<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M42))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ACCESS CONTROL",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Account management","3a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q44<>\"P\",0,mySWITCH(INT($M44),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T44<>\"P\",0,pcOfTargetAchieved(ROW(),$M44))","v":0},null,null,{"$f":"IF($W44<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M44))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C45),Lookup!$E$9:$E$100,0))","v":2},"Identity authentication","3b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q45<>\"P\",0,mySWITCH(INT($M45),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T45<>\"P\",0,pcOfTargetAchieved(ROW(),$M45))","v":0},null,"P",{"$f":"IF($W45<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M45))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C46),Lookup!$E$9:$E$100,0))","v":2},"Privilege management","3e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q46<>\"P\",0,mySWITCH(INT($M46),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T46<>\"P\",0,pcOfTargetAchieved(ROW(),$M46))","v":0},null,"P",{"$f":"IF($W46<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M46))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C47),Lookup!$E$9:$E$100,0))","v":2},"Administrator account management","3f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q47<>\"P\",0,mySWITCH(INT($M47),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T47<>\"P\",0,pcOfTargetAchieved(ROW(),$M47))","v":0},null,"P",{"$f":"IF($W47<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M47))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"MEDIA MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Storage media management","14a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q49<>\"P\",0,mySWITCH(INT($M49),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T49<>\"P\",0,pcOfTargetAchieved(ROW(),$M49))","v":0},null,"P",{"$f":"IF($W49<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M49))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C50),Lookup!$E$9:$E$100,0))","v":2},"Mobile media/devices","14b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q50<>\"P\",0,mySWITCH(INT($M50),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T50<>\"P\",0,pcOfTargetAchieved(ROW(),$M50))","v":0},null,"P",{"$f":"IF($W50<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M50))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C51),Lookup!$E$9:$E$100,0))","v":2},"Cryptography","14c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q51<>\"P\",0,mySWITCH(INT($M51),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T51<>\"P\",0,pcOfTargetAchieved(ROW(),$M51))","v":0},null,"P",{"$f":"IF($W51<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M51))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C52),Lookup!$E$9:$E$100,0))","v":2},"Remote wipe capability","14d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q52<>\"P\",0,mySWITCH(INT($M52),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T52<>\"P\",0,pcOfTargetAchieved(ROW(),$M52))","v":0},null,null,{"$f":"IF($W52<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M52))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ENVIRONMENTAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Equipment location","15a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q54<>\"P\",0,mySWITCH(INT($M54),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T54<>\"P\",0,pcOfTargetAchieved(ROW(),$M54))","v":0},null,"P",{"$f":"IF($W54<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M54))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C55),Lookup!$E$9:$E$100,0))","v":2},"Power resilience","15b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q55<>\"P\",0,mySWITCH(INT($M55),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T55<>\"P\",0,pcOfTargetAchieved(ROW(),$M55))","v":0},null,"P",{"$f":"IF($W55<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M55))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PHYSICAL/BUILDING SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Access control","5a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q57<>\"P\",0,mySWITCH(INT($M57),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T57<>\"P\",0,pcOfTargetAchieved(ROW(),$M57))","v":0},null,"P",{"$f":"IF($W57<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M57))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C58),Lookup!$E$9:$E$100,0))","v":2},"Internal security","5b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q58<>\"P\",0,mySWITCH(INT($M58),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T58<>\"P\",0,pcOfTargetAchieved(ROW(),$M58))","v":0},null,"P",{"$f":"IF($W58<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M58))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SYSTEM MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Secure configuration  ","6c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q60<>\"P\",0,mySWITCH(INT($M60),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T60<>\"P\",0,pcOfTargetAchieved(ROW(),$M60))","v":0},null,"P",{"$f":"IF($W60<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M60))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C61),Lookup!$E$9:$E$100,0))","v":2},"Secure design/development","6d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q61<>\"P\",0,mySWITCH(INT($M61),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T61<>\"P\",0,pcOfTargetAchieved(ROW(),$M61))","v":0},null,"P",{"$f":"IF($W61<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M61))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C62),Lookup!$E$9:$E$100,0))","v":2},"Change control procedures","6e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q62<>\"P\",0,mySWITCH(INT($M62),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T62<>\"P\",0,pcOfTargetAchieved(ROW(),$M62))","v":0},null,"P",{"$f":"IF($W62<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M62))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C63),Lookup!$E$9:$E$100,0))","v":2},"System Testing","6f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q63<>\"P\",0,mySWITCH(INT($M63),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T63<>\"P\",0,pcOfTargetAchieved(ROW(),$M63))","v":0},null,"P",{"$f":"IF($W63<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M63))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"OPERATIONAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Malware policies & protection","7a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q65<>\"P\",0,mySWITCH(INT($M65),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T65<>\"P\",0,pcOfTargetAchieved(ROW(),$M65))","v":0},null,null,{"$f":"IF($W65<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M65))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C66),Lookup!$E$9:$E$100,0))","v":2},"Email security","7e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q66<>\"P\",0,mySWITCH(INT($M66),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T66<>\"P\",0,pcOfTargetAchieved(ROW(),$M66))","v":0},null,null,{"$f":"IF($W66<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M66))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C67),Lookup!$E$9:$E$100,0))","v":2},"Application security","7f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q67<>\"P\",0,mySWITCH(INT($M67),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T67<>\"P\",0,pcOfTargetAchieved(ROW(),$M67))","v":0},null,"",{"$f":"IF($W67<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M67))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C68),Lookup!$E$9:$E$100,0))","v":2},"Vulnerability management & scanning","7h",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q68<>\"P\",0,mySWITCH(INT($M68),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T68<>\"P\",0,pcOfTargetAchieved(ROW(),$M68))","v":0},null,"P",{"$f":"IF($W68<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M68))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C69),Lookup!$E$9:$E$100,0))","v":2},"Data exfiltration monitoring","7k",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q69<>\"P\",0,mySWITCH(INT($M69),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T69<>\"P\",0,pcOfTargetAchieved(ROW(),$M69))","v":0},null,null,{"$f":"IF($W69<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M69))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C70),Lookup!$E$9:$E$100,0))","v":2},"Software supported & updated","7l",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q70<>\"P\",0,mySWITCH(INT($M70),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T70<>\"P\",0,pcOfTargetAchieved(ROW(),$M70))","v":0},null,"P",{"$f":"IF($W70<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M70))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C71),Lookup!$E$9:$E$100,0))","v":2},"Web site screening","7m",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q71<>\"P\",0,mySWITCH(INT($M71),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T71<>\"P\",0,pcOfTargetAchieved(ROW(),$M71))","v":0},null,"",{"$f":"IF($W71<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M71))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C72),Lookup!$E$9:$E$100,0))","v":2},"Browser management","7n",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q72<>\"P\",0,mySWITCH(INT($M72),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T72<>\"P\",0,pcOfTargetAchieved(ROW(),$M72))","v":0},null,"",{"$f":"IF($W72<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M72))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C73),Lookup!$E$9:$E$100,0))","v":2},"Monitor/audit user activity","7o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q73<>\"P\",0,mySWITCH(INT($M73),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T73<>\"P\",0,pcOfTargetAchieved(ROW(),$M73))","v":0},null,"P",{"$f":"IF($W73<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M73))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C74),Lookup!$E$9:$E$100,0))","v":2},"Disabled auto-run","7p",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q74<>\"P\",0,mySWITCH(INT($M74),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T74<>\"P\",0,pcOfTargetAchieved(ROW(),$M74))","v":0},null,"",{"$f":"IF($W74<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M74))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"NETWORK SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Patch management","8a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q76<>\"P\",0,mySWITCH(INT($M76),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T76<>\"P\",0,pcOfTargetAchieved(ROW(),$M76))","v":0},null,null,{"$f":"IF($W76<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M76))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Device management","8b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q77<>\"P\",0,mySWITCH(INT($M77),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T77<>\"P\",0,pcOfTargetAchieved(ROW(),$M77))","v":0},null,"P",{"$f":"IF($W77<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M77))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Content screening","8c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q78<>\"P\",0,mySWITCH(INT($M78),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T78<>\"P\",0,pcOfTargetAchieved(ROW(),$M78))","v":0},null,null,{"$f":"IF($W78<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M78))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Internal segregation","8d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q79<>\"P\",0,mySWITCH(INT($M79),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T79<>\"P\",0,pcOfTargetAchieved(ROW(),$M79))","v":0},null,"P",{"$f":"IF($W79<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M79))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Wireless security","8e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q80<>\"P\",0,mySWITCH(INT($M80),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T80<>\"P\",0,pcOfTargetAchieved(ROW(),$M80))","v":0},null,"",{"$f":"IF($W80<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M80))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Boundary/Firewall management","8f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q81<>\"P\",0,mySWITCH(INT($M81),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T81<>\"P\",0,pcOfTargetAchieved(ROW(),$M81))","v":0},null,"P",{"$f":"IF($W81<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M81))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Administrator control","8g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q82<>\"P\",0,mySWITCH(INT($M82),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T82<>\"P\",0,pcOfTargetAchieved(ROW(),$M82))","v":0},null,"P",{"$f":"IF($W82<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M82))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Error message management","8h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q83<>\"P\",0,mySWITCH(INT($M83),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T83<>\"P\",0,pcOfTargetAchieved(ROW(),$M83))","v":0},null,"",{"$f":"IF($W83<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M83))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Penetration testing","8i",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q84<>\"P\",0,mySWITCH(INT($M84),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T84<>\"P\",0,pcOfTargetAchieved(ROW(),$M84))","v":0},null,null,{"$f":"IF($W84<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M84))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"IP & DNS management","8j",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q85<>\"P\",0,mySWITCH(INT($M85),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T85<>\"P\",0,pcOfTargetAchieved(ROW(),$M85))","v":0},null,"P",{"$f":"IF($W85<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M85))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["DETECT",null,"INCIDENT DETECTION",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Detection capability","16a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q87<>\"P\",0,mySWITCH(INT($M87),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T87<>\"P\",0,pcOfTargetAchieved(ROW(),$M87))","v":0},null,"P",{"$f":"IF($W87<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M87))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Security Monitoring","16b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q88<>\"P\",0,mySWITCH(INT($M88),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T88<>\"P\",0,pcOfTargetAchieved(ROW(),$M88))","v":0},null,"P",{"$f":"IF($W88<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M88))","v":0},null,0,0,0,0,0,0,0,0,0]
["RESPOND & RECOVER",null,"INCIDENT MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Incident response protocol","10b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q90<>\"P\",0,mySWITCH(INT($M90),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T90<>\"P\",0,pcOfTargetAchieved(ROW(),$M90))","v":0},null,"P",{"$f":"IF($W90<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M90))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Incident reporting procedure","10c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q91<>\"P\",0,mySWITCH(INT($M91),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T91<>\"P\",0,pcOfTargetAchieved(ROW(),$M91))","v":0},null,null,{"$f":"IF($W91<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M91))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & testing","10d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q92<>\"P\",0,mySWITCH(INT($M92),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T92<>\"P\",0,pcOfTargetAchieved(ROW(),$M92))","v":0},null,null,{"$f":"IF($W92<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M92))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Post-incident review & learning","10e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q93<>\"P\",0,mySWITCH(INT($M93),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T93<>\"P\",0,pcOfTargetAchieved(ROW(),$M93))","v":0},null,"P",{"$f":"IF($W93<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M93))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BUSINESS CONTINUITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Data recover capability","12a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q95<>\"P\",0,mySWITCH(INT($M95),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T95<>\"P\",0,pcOfTargetAchieved(ROW(),$M95))","v":0},null,"P",{"$f":"IF($W95<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M95))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Back up policies & procedures","12b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q96<>\"P\",0,mySWITCH(INT($M96),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T96<>\"P\",0,pcOfTargetAchieved(ROW(),$M96))","v":0},null,"P",{"$f":"IF($W96<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M96))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Disaster recovery policies & procedures","12c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q97<>\"P\",0,mySWITCH(INT($M97),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T97<>\"P\",0,pcOfTargetAchieved(ROW(),$M97))","v":0},null,"P",{"$f":"IF($W97<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M97))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC/DR testing policies & procedures","12d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q98<>\"P\",0,mySWITCH(INT($M98),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T98<>\"P\",0,pcOfTargetAchieved(ROW(),$M98))","v":0},null,"P",{"$f":"IF($W98<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M98))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Data Loss impact assessments","12e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q99<>\"P\",0,mySWITCH(INT($M99),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T99<>\"P\",0,pcOfTargetAchieved(ROW(),$M99))","v":0},null,"P",{"$f":"IF($W99<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M99))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC contingency plan","12f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q100<>\"P\",0,mySWITCH(INT($M100),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T100<>\"P\",0,pcOfTargetAchieved(ROW(),$M100))","v":0},null,"P",{"$f":"IF($W100<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M100))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,"OVERALL TOTALS"]

{"sheet":"R03","index":4,"n_rows":101,"n_cols":35,"rows_kept":101,"cut":false,"hidden":false,"merged":[[85,0,87,0],[88,0,99,0],[100,13,100,24],[6,3,6,12],[7,0,26,0],[7,16,7,17],[7,19,7,20],[7,22,7,23],[27,0,84,0],[13,16,13,17],[13,19,13,20],[13,22,13,23],[18,16,18,17],[18,19,18,20],[18,22,18,23],[23,16,23,17],[5,3,5,12],[1,3,1,12],[2,3,2,12],[2,17,2,23],[3,3,3,12],[4,2,4,11],[23,19,23,20],[23,22,23,23],[27,16,27,17],[27,19,27,20],[27,22,27,23],[34,16,34,17],[34,19,34,20],[34,22,34,23],[40,16,40,17],[40,19,40,20],[40,22,40,23],[42,16,42,17],[42,19,42,20],[42,22,42,23],[47,16,47,17],[47,19,47,20],[47,22,47,23],[52,16,52,17],[52,19,52,20],[52,22,52,23],[55,16,55,17],[55,19,55,20],[55,22,55,23],[58,16,58,17],[58,19,58,20],[58,22,58,23],[63,16,63,17],[63,19,63,20],[63,22,63,23],[74,16,74,17],[74,19,74,20],[74,22,74,23],[85,16,85,17],[85,19,85,20],[85,22,85,23],[88,16,88,17],[88,19,88,20],[88,22,88,23],[93,16,93,17],[93,19,93,20],[93,22,93,23]]}
[null,null,"Report 3"]
[null,null,"Report Date:","2019-06-21"]
[null,null,"Assessor:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"RAG Status"]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,5,null,"NIS - CAF",null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[]
["MANAGE",null,"ORGANISATIONAL GOVERNANCE",null,null,"N/A","0",1,2,3,4,5,"Scored",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C9),Lookup!$E$9:$E$100,0))","v":1},"Governance framework",{"$f":"Lookup!F9","v":"2a"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q9<>\"P\",0,mySWITCH(INT($M9),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C10),Lookup!$E$9:$E$100,0))","v":1},"Leadership & responsibility",{"$f":"Lookup!F10","v":"2b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q10<>\"P\",0,mySWITCH(INT($M10),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T10<>\"P\",0,pcOfTargetAchieved(ROW(),$M10))","v":0},null,"P",{"$f":"IF($W10<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M10))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C11),Lookup!$E$9:$E$100,0))","v":1},"Adoption of assurance standards",{"$f":"Lookup!F11","v":"2e"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q11<>\"P\",0,mySWITCH(INT($M11),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T11<>\"P\",0,pcOfTargetAchieved(ROW(),$M11))","v":0},null,"P",{"$f":"IF($W11<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M11))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C12),Lookup!$E$9:$E$100,0))","v":1},"Information Asset Register",{"$f":"Lookup!F12","v":"2f"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q12<>\"P\",0,mySWITCH(INT($M12),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T12<>\"P\",0,pcOfTargetAchieved(ROW(),$M12))","v":0},null,"P",{"$f":"IF($W12<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M12))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C13),Lookup!$E$9:$E$100,0))","v":1},"Audit/assurance compliance",{"$f":"Lookup!F13","v":"2g"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q13<>\"P\",0,mySWITCH(INT($M13),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T13<>\"P\",0,pcOfTargetAchieved(ROW(),$M13))","v":0},null,"P",{"$f":"IF($W13<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M13))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"RISK MANAGEMENT",null,null,null,"0",1,2,3,4,5,null,null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C15),Lookup!$E$9:$E$100,0))","v":1},"Risk management policy & process","11a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q15<>\"P\",0,mySWITCH(INT($M15),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T15<>\"P\",0,pcOfTargetAchieved(ROW(),$M15))","v":0},null,"P",{"$f":"IF($W15<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M15))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C16),Lookup!$E$9:$E$100,0))","v":1},"Cyber / Information Risk Assessment","11b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q16<>\"P\",0,mySWITCH(INT($M16),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T16<>\"P\",0,pcOfTargetAchieved(ROW(),$M16))","v":0},null,"P",{"$f":"IF($W16<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M16))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C17),Lookup!$E$9:$E$100,0))","v":1},"Risk treatment & tolerance","11c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q17<>\"P\",0,mySWITCH(INT($M17),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T17<>\"P\",0,pcOfTargetAchieved(ROW(),$M17))","v":0},null,"P",{"$f":"IF($W17<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M17))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C18),Lookup!$E$9:$E$100,0))","v":1},"Risk governance","11d",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q18<>\"P\",0,mySWITCH(INT($M18),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T18<>\"P\",0,pcOfTargetAchieved(ROW(),$M18))","v":0},null,"P",{"$f":"IF($W18<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M18))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"SUPPLIER MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C20),Lookup!$E$9:$E$100,0))","v":1},"Supply chain security assurance & management","9a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q20<>\"P\",0,mySWITCH(INT($M20),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T20<>\"P\",0,pcOfTargetAchieved(ROW(),$M20))","v":0},null,null,{"$f":"IF($W20<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M20))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C21),Lookup!$E$9:$E$100,0))","v":1},"Roles & responsibilities defined","9b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q21<>\"P\",0,mySWITCH(INT($M21),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T21<>\"P\",0,pcOfTargetAchieved(ROW(),$M21))","v":0},null,"P",{"$f":"IF($W21<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M21))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C22),Lookup!$E$9:$E$100,0))","v":1},"Access control","9c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q22<>\"P\",0,mySWITCH(INT($M22),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T22<>\"P\",0,pcOfTargetAchieved(ROW(),$M22))","v":0},null,"P",{"$f":"IF($W22<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M22))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C23),Lookup!$E$9:$E$100,0))","v":1},"Security in system procurements","9d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q23<>\"P\",0,mySWITCH(INT($M23),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T23<>\"P\",0,pcOfTargetAchieved(ROW(),$M23))","v":0},null,"P",{"$f":"IF($W23<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M23))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"ASSET MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C25),Lookup!$E$9:$E$100,0))","v":1},"Hardware assets register & management",{"$f":"Lookup!$F25","v":"4a"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q25<>\"P\",0,mySWITCH(INT($M25),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T25<>\"P\",0,pcOfTargetAchieved(ROW(),$M25))","v":0},null,"P",{"$f":"IF($W25<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M25))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C26),Lookup!$E$9:$E$100,0))","v":1},"Software assets register & management",{"$f":"Lookup!$F26","v":"4b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q26<>\"P\",0,mySWITCH(INT($M26),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T26<>\"P\",0,pcOfTargetAchieved(ROW(),$M26))","v":0},null,"P",{"$f":"IF($W26<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M26))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C27),Lookup!$E$9:$E$100,0))","v":1},"Infrastructure management",{"$f":"Lookup!$F27","v":"4c"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q27<>\"P\",0,mySWITCH(INT($M27),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T27<>\"P\",0,pcOfTargetAchieved(ROW(),$M27))","v":0},null,"P",{"$f":"IF($W27<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M27))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["PROTECT",null,"INFORMATION SECURITY MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C29),Lookup!$E$9:$E$100,0))","v":2},"Security policy & processes","1a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q29<>\"P\",0,mySWITCH(INT($M29),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T29<>\"P\",0,pcOfTargetAchieved(ROW(),$M29))","v":0},null,"P",{"$f":"IF($W29<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M29))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C30),Lookup!$E$9:$E$100,0))","v":2},"Lifecycle management","1b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q30<>\"P\",0,mySWITCH(INT($M30),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T30<>\"P\",0,pcOfTargetAchieved(ROW(),$M30))","v":0},null,"P",{"$f":"IF($W30<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M30))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Storage","1c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q31<>\"P\",0,mySWITCH(INT($M31),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T31<>\"P\",0,pcOfTargetAchieved(ROW(),$M31))","v":0},null,"P",{"$f":"IF($W31<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M31))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data classification","1f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q32<>\"P\",0,mySWITCH(INT($M32),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T32<>\"P\",0,pcOfTargetAchieved(ROW(),$M32))","v":0},null,"P",{"$f":"IF($W32<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M32))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Information assets register","1g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q33<>\"P\",0,mySWITCH(INT($M33),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T33<>\"P\",0,pcOfTargetAchieved(ROW(),$M33))","v":0},null,"P",{"$f":"IF($W33<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M33))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data transfer controls","1h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q34<>\"P\",0,mySWITCH(INT($M34),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T34<>\"P\",0,pcOfTargetAchieved(ROW(),$M34))","v":0},null,"P",{"$f":"IF($W34<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M34))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PEOPLE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Prior to employment","13a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q36<>\"P\",0,mySWITCH(INT($M36),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T36<>\"P\",0,pcOfTargetAchieved(ROW(),$M36))","v":0},null,"P",{"$f":"IF($W36<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M36))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C37),Lookup!$E$9:$E$100,0))","v":2},"During employment","13d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q37<>\"P\",0,mySWITCH(INT($M37),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T37<>\"P\",0,pcOfTargetAchieved(ROW(),$M37))","v":0},null,"P",{"$f":"IF($W37<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M37))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & awareness culture","13i",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q38<>\"P\",0,mySWITCH(INT($M38),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T38<>\"P\",0,pcOfTargetAchieved(ROW(),$M38))","v":0},null,"P",{"$f":"IF($W38<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M38))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff skills assessment","13j",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q39<>\"P\",0,mySWITCH(INT($M39),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T39<>\"P\",0,pcOfTargetAchieved(ROW(),$M39))","v":0},null,"P",{"$f":"IF($W39<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M39))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Mobile/remote working policy","13o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q40<>\"P\",0,mySWITCH(INT($M40),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T40<>\"P\",0,pcOfTargetAchieved(ROW(),$M40))","v":0},null,"P",{"$f":"IF($W40<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M40))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SERVICES RESILIENCE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Services Resilience","17a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q42<>\"P\",0,mySWITCH(INT($M42),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T42<>\"P\",0,pcOfTargetAchieved(ROW(),$M42))","v":0},null,"P",{"$f":"IF($W42<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M42))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ACCESS CONTROL",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Account management","3a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q44<>\"P\",0,mySWITCH(INT($M44),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T44<>\"P\",0,pcOfTargetAchieved(ROW(),$M44))","v":0},null,null,{"$f":"IF($W44<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M44))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C45),Lookup!$E$9:$E$100,0))","v":2},"Identity authentication","3b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q45<>\"P\",0,mySWITCH(INT($M45),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T45<>\"P\",0,pcOfTargetAchieved(ROW(),$M45))","v":0},null,"P",{"$f":"IF($W45<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M45))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C46),Lookup!$E$9:$E$100,0))","v":2},"Privilege management","3e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q46<>\"P\",0,mySWITCH(INT($M46),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T46<>\"P\",0,pcOfTargetAchieved(ROW(),$M46))","v":0},null,"P",{"$f":"IF($W46<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M46))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C47),Lookup!$E$9:$E$100,0))","v":2},"Administrator account management","3f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q47<>\"P\",0,mySWITCH(INT($M47),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T47<>\"P\",0,pcOfTargetAchieved(ROW(),$M47))","v":0},null,"P",{"$f":"IF($W47<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M47))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"MEDIA MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Storage media management","14a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q49<>\"P\",0,mySWITCH(INT($M49),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T49<>\"P\",0,pcOfTargetAchieved(ROW(),$M49))","v":0},null,"P",{"$f":"IF($W49<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M49))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C50),Lookup!$E$9:$E$100,0))","v":2},"Mobile media/devices","14b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q50<>\"P\",0,mySWITCH(INT($M50),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T50<>\"P\",0,pcOfTargetAchieved(ROW(),$M50))","v":0},null,"P",{"$f":"IF($W50<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M50))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C51),Lookup!$E$9:$E$100,0))","v":2},"Cryptography","14c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q51<>\"P\",0,mySWITCH(INT($M51),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T51<>\"P\",0,pcOfTargetAchieved(ROW(),$M51))","v":0},null,"P",{"$f":"IF($W51<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M51))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C52),Lookup!$E$9:$E$100,0))","v":2},"Remote wipe capability","14d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q52<>\"P\",0,mySWITCH(INT($M52),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T52<>\"P\",0,pcOfTargetAchieved(ROW(),$M52))","v":0},null,null,{"$f":"IF($W52<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M52))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ENVIRONMENTAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Equipment location","15a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q54<>\"P\",0,mySWITCH(INT($M54),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T54<>\"P\",0,pcOfTargetAchieved(ROW(),$M54))","v":0},null,"P",{"$f":"IF($W54<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M54))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C55),Lookup!$E$9:$E$100,0))","v":2},"Power resilience","15b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q55<>\"P\",0,mySWITCH(INT($M55),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T55<>\"P\",0,pcOfTargetAchieved(ROW(),$M55))","v":0},null,"P",{"$f":"IF($W55<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M55))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PHYSICAL/BUILDING SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Access control","5a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q57<>\"P\",0,mySWITCH(INT($M57),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T57<>\"P\",0,pcOfTargetAchieved(ROW(),$M57))","v":0},null,"P",{"$f":"IF($W57<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M57))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C58),Lookup!$E$9:$E$100,0))","v":2},"Internal security","5b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q58<>\"P\",0,mySWITCH(INT($M58),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T58<>\"P\",0,pcOfTargetAchieved(ROW(),$M58))","v":0},null,"P",{"$f":"IF($W58<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M58))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SYSTEM MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Secure configuration  ","6c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q60<>\"P\",0,mySWITCH(INT($M60),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T60<>\"P\",0,pcOfTargetAchieved(ROW(),$M60))","v":0},null,"P",{"$f":"IF($W60<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M60))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C61),Lookup!$E$9:$E$100,0))","v":2},"Secure design/development","6d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q61<>\"P\",0,mySWITCH(INT($M61),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T61<>\"P\",0,pcOfTargetAchieved(ROW(),$M61))","v":0},null,"P",{"$f":"IF($W61<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M61))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C62),Lookup!$E$9:$E$100,0))","v":2},"Change control procedures","6e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q62<>\"P\",0,mySWITCH(INT($M62),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T62<>\"P\",0,pcOfTargetAchieved(ROW(),$M62))","v":0},null,"P",{"$f":"IF($W62<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M62))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C63),Lookup!$E$9:$E$100,0))","v":2},"System Testing","6f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q63<>\"P\",0,mySWITCH(INT($M63),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T63<>\"P\",0,pcOfTargetAchieved(ROW(),$M63))","v":0},null,"P",{"$f":"IF($W63<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M63))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"OPERATIONAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Malware policies & protection","7a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q65<>\"P\",0,mySWITCH(INT($M65),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T65<>\"P\",0,pcOfTargetAchieved(ROW(),$M65))","v":0},null,null,{"$f":"IF($W65<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M65))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C66),Lookup!$E$9:$E$100,0))","v":2},"Email security","7e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q66<>\"P\",0,mySWITCH(INT($M66),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T66<>\"P\",0,pcOfTargetAchieved(ROW(),$M66))","v":0},null,null,{"$f":"IF($W66<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M66))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C67),Lookup!$E$9:$E$100,0))","v":2},"Application security","7f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q67<>\"P\",0,mySWITCH(INT($M67),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T67<>\"P\",0,pcOfTargetAchieved(ROW(),$M67))","v":0},null,"",{"$f":"IF($W67<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M67))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C68),Lookup!$E$9:$E$100,0))","v":2},"Vulnerability management & scanning","7h",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q68<>\"P\",0,mySWITCH(INT($M68),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T68<>\"P\",0,pcOfTargetAchieved(ROW(),$M68))","v":0},null,"P",{"$f":"IF($W68<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M68))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C69),Lookup!$E$9:$E$100,0))","v":2},"Data exfiltration monitoring","7k",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q69<>\"P\",0,mySWITCH(INT($M69),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T69<>\"P\",0,pcOfTargetAchieved(ROW(),$M69))","v":0},null,null,{"$f":"IF($W69<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M69))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C70),Lookup!$E$9:$E$100,0))","v":2},"Software supported & updated","7l",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q70<>\"P\",0,mySWITCH(INT($M70),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T70<>\"P\",0,pcOfTargetAchieved(ROW(),$M70))","v":0},null,"P",{"$f":"IF($W70<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M70))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C71),Lookup!$E$9:$E$100,0))","v":2},"Web site screening","7m",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q71<>\"P\",0,mySWITCH(INT($M71),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T71<>\"P\",0,pcOfTargetAchieved(ROW(),$M71))","v":0},null,"",{"$f":"IF($W71<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M71))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C72),Lookup!$E$9:$E$100,0))","v":2},"Browser management","7n",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q72<>\"P\",0,mySWITCH(INT($M72),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T72<>\"P\",0,pcOfTargetAchieved(ROW(),$M72))","v":0},null,"",{"$f":"IF($W72<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M72))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C73),Lookup!$E$9:$E$100,0))","v":2},"Monitor/audit user activity","7o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q73<>\"P\",0,mySWITCH(INT($M73),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T73<>\"P\",0,pcOfTargetAchieved(ROW(),$M73))","v":0},null,"P",{"$f":"IF($W73<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M73))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C74),Lookup!$E$9:$E$100,0))","v":2},"Disabled auto-run","7p",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q74<>\"P\",0,mySWITCH(INT($M74),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T74<>\"P\",0,pcOfTargetAchieved(ROW(),$M74))","v":0},null,"",{"$f":"IF($W74<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M74))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"NETWORK SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Patch management","8a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q76<>\"P\",0,mySWITCH(INT($M76),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T76<>\"P\",0,pcOfTargetAchieved(ROW(),$M76))","v":0},null,null,{"$f":"IF($W76<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M76))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Device management","8b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q77<>\"P\",0,mySWITCH(INT($M77),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T77<>\"P\",0,pcOfTargetAchieved(ROW(),$M77))","v":0},null,"P",{"$f":"IF($W77<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M77))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Content screening","8c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q78<>\"P\",0,mySWITCH(INT($M78),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T78<>\"P\",0,pcOfTargetAchieved(ROW(),$M78))","v":0},null,null,{"$f":"IF($W78<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M78))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Internal segregation","8d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q79<>\"P\",0,mySWITCH(INT($M79),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T79<>\"P\",0,pcOfTargetAchieved(ROW(),$M79))","v":0},null,"P",{"$f":"IF($W79<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M79))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Wireless security","8e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q80<>\"P\",0,mySWITCH(INT($M80),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T80<>\"P\",0,pcOfTargetAchieved(ROW(),$M80))","v":0},null,"",{"$f":"IF($W80<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M80))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Boundary/Firewall management","8f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q81<>\"P\",0,mySWITCH(INT($M81),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T81<>\"P\",0,pcOfTargetAchieved(ROW(),$M81))","v":0},null,"P",{"$f":"IF($W81<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M81))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Administrator control","8g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q82<>\"P\",0,mySWITCH(INT($M82),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T82<>\"P\",0,pcOfTargetAchieved(ROW(),$M82))","v":0},null,"P",{"$f":"IF($W82<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M82))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Error message management","8h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q83<>\"P\",0,mySWITCH(INT($M83),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T83<>\"P\",0,pcOfTargetAchieved(ROW(),$M83))","v":0},null,"",{"$f":"IF($W83<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M83))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Penetration testing","8i",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q84<>\"P\",0,mySWITCH(INT($M84),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T84<>\"P\",0,pcOfTargetAchieved(ROW(),$M84))","v":0},null,null,{"$f":"IF($W84<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M84))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"IP & DNS management","8j",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q85<>\"P\",0,mySWITCH(INT($M85),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T85<>\"P\",0,pcOfTargetAchieved(ROW(),$M85))","v":0},null,"P",{"$f":"IF($W85<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M85))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["DETECT",null,"INCIDENT DETECTION",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Detection capability","16a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q87<>\"P\",0,mySWITCH(INT($M87),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T87<>\"P\",0,pcOfTargetAchieved(ROW(),$M87))","v":0},null,"P",{"$f":"IF($W87<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M87))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Security Monitoring","16b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q88<>\"P\",0,mySWITCH(INT($M88),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T88<>\"P\",0,pcOfTargetAchieved(ROW(),$M88))","v":0},null,"P",{"$f":"IF($W88<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M88))","v":0},null,0,0,0,0,0,0,0,0,0]
["RESPOND & RECOVER",null,"INCIDENT MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Incident response protocol","10b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q90<>\"P\",0,mySWITCH(INT($M90),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T90<>\"P\",0,pcOfTargetAchieved(ROW(),$M90))","v":0},null,"P",{"$f":"IF($W90<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M90))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Incident reporting procedure","10c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q91<>\"P\",0,mySWITCH(INT($M91),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T91<>\"P\",0,pcOfTargetAchieved(ROW(),$M91))","v":0},null,null,{"$f":"IF($W91<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M91))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & testing","10d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q92<>\"P\",0,mySWITCH(INT($M92),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T92<>\"P\",0,pcOfTargetAchieved(ROW(),$M92))","v":0},null,null,{"$f":"IF($W92<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M92))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Post-incident review & learning","10e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q93<>\"P\",0,mySWITCH(INT($M93),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T93<>\"P\",0,pcOfTargetAchieved(ROW(),$M93))","v":0},null,"P",{"$f":"IF($W93<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M93))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BUSINESS CONTINUITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Data recover capability","12a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q95<>\"P\",0,mySWITCH(INT($M95),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T95<>\"P\",0,pcOfTargetAchieved(ROW(),$M95))","v":0},null,"P",{"$f":"IF($W95<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M95))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Back up policies & procedures","12b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q96<>\"P\",0,mySWITCH(INT($M96),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T96<>\"P\",0,pcOfTargetAchieved(ROW(),$M96))","v":0},null,"P",{"$f":"IF($W96<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M96))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Disaster recovery policies & procedures","12c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q97<>\"P\",0,mySWITCH(INT($M97),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T97<>\"P\",0,pcOfTargetAchieved(ROW(),$M97))","v":0},null,"P",{"$f":"IF($W97<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M97))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC/DR testing policies & procedures","12d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q98<>\"P\",0,mySWITCH(INT($M98),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T98<>\"P\",0,pcOfTargetAchieved(ROW(),$M98))","v":0},null,"P",{"$f":"IF($W98<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M98))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Data Loss impact assessments","12e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q99<>\"P\",0,mySWITCH(INT($M99),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T99<>\"P\",0,pcOfTargetAchieved(ROW(),$M99))","v":0},null,"P",{"$f":"IF($W99<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M99))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC contingency plan","12f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q100<>\"P\",0,mySWITCH(INT($M100),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T100<>\"P\",0,pcOfTargetAchieved(ROW(),$M100))","v":0},null,"P",{"$f":"IF($W100<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M100))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,"OVERALL TOTALS"]

{"sheet":"R04","index":5,"n_rows":101,"n_cols":35,"rows_kept":101,"cut":false,"hidden":false,"merged":[[85,0,87,0],[88,0,99,0],[100,13,100,24],[6,3,6,12],[7,0,26,0],[7,16,7,17],[7,19,7,20],[7,22,7,23],[27,0,84,0],[13,16,13,17],[13,19,13,20],[13,22,13,23],[18,16,18,17],[18,19,18,20],[18,22,18,23],[23,16,23,17],[5,3,5,12],[1,3,1,12],[2,3,2,12],[2,17,2,23],[3,3,3,12],[4,2,4,11],[23,19,23,20],[23,22,23,23],[27,16,27,17],[27,19,27,20],[27,22,27,23],[34,16,34,17],[34,19,34,20],[34,22,34,23],[40,16,40,17],[40,19,40,20],[40,22,40,23],[42,16,42,17],[42,19,42,20],[42,22,42,23],[47,16,47,17],[47,19,47,20],[47,22,47,23],[52,16,52,17],[52,19,52,20],[52,22,52,23],[55,16,55,17],[55,19,55,20],[55,22,55,23],[58,16,58,17],[58,19,58,20],[58,22,58,23],[63,16,63,17],[63,19,63,20],[63,22,63,23],[74,16,74,17],[74,19,74,20],[74,22,74,23],[85,16,85,17],[85,19,85,20],[85,22,85,23],[88,16,88,17],[88,19,88,20],[88,22,88,23],[93,16,93,17],[93,19,93,20],[93,22,93,23]]}
[null,null,"Report 4"]
[null,null,"Report Date:","2019-06-26"]
[null,null,"Assessor:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"RAG Status"]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,5,null,"PSN - ITHC",null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}}]
[]
["MANAGE",null,"ORGANISATIONAL GOVERNANCE",null,null,"N/A","0",1,2,3,4,5,"Scored",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C9),Lookup!$E$9:$E$100,0))","v":1},"Governance framework",{"$f":"Lookup!F9","v":"2a"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q9<>\"P\",0,mySWITCH(INT($M9),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C10),Lookup!$E$9:$E$100,0))","v":1},"Leadership & responsibility",{"$f":"Lookup!F10","v":"2b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q10<>\"P\",0,mySWITCH(INT($M10),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T10<>\"P\",0,pcOfTargetAchieved(ROW(),$M10))","v":0},null,"P",{"$f":"IF($W10<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M10))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C11),Lookup!$E$9:$E$100,0))","v":1},"Adoption of assurance standards",{"$f":"Lookup!F11","v":"2e"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q11<>\"P\",0,mySWITCH(INT($M11),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T11<>\"P\",0,pcOfTargetAchieved(ROW(),$M11))","v":0},null,"P",{"$f":"IF($W11<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M11))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C12),Lookup!$E$9:$E$100,0))","v":1},"Information Asset Register",{"$f":"Lookup!F12","v":"2f"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q12<>\"P\",0,mySWITCH(INT($M12),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T12<>\"P\",0,pcOfTargetAchieved(ROW(),$M12))","v":0},null,"P",{"$f":"IF($W12<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M12))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C13),Lookup!$E$9:$E$100,0))","v":1},"Audit/assurance compliance",{"$f":"Lookup!F13","v":"2g"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q13<>\"P\",0,mySWITCH(INT($M13),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T13<>\"P\",0,pcOfTargetAchieved(ROW(),$M13))","v":0},null,"P",{"$f":"IF($W13<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M13))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"RISK MANAGEMENT",null,null,null,"0",1,2,3,4,5,null,null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C15),Lookup!$E$9:$E$100,0))","v":1},"Risk management policy & process","11a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q15<>\"P\",0,mySWITCH(INT($M15),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T15<>\"P\",0,pcOfTargetAchieved(ROW(),$M15))","v":0},null,"P",{"$f":"IF($W15<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M15))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C16),Lookup!$E$9:$E$100,0))","v":1},"Cyber / Information Risk Assessment","11b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q16<>\"P\",0,mySWITCH(INT($M16),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T16<>\"P\",0,pcOfTargetAchieved(ROW(),$M16))","v":0},null,"P",{"$f":"IF($W16<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M16))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C17),Lookup!$E$9:$E$100,0))","v":1},"Risk treatment & tolerance","11c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q17<>\"P\",0,mySWITCH(INT($M17),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T17<>\"P\",0,pcOfTargetAchieved(ROW(),$M17))","v":0},null,"P",{"$f":"IF($W17<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M17))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C18),Lookup!$E$9:$E$100,0))","v":1},"Risk governance","11d",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q18<>\"P\",0,mySWITCH(INT($M18),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T18<>\"P\",0,pcOfTargetAchieved(ROW(),$M18))","v":0},null,"P",{"$f":"IF($W18<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M18))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"SUPPLIER MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C20),Lookup!$E$9:$E$100,0))","v":1},"Supply chain security assurance & management","9a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q20<>\"P\",0,mySWITCH(INT($M20),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T20<>\"P\",0,pcOfTargetAchieved(ROW(),$M20))","v":0},null,null,{"$f":"IF($W20<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M20))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C21),Lookup!$E$9:$E$100,0))","v":1},"Roles & responsibilities defined","9b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q21<>\"P\",0,mySWITCH(INT($M21),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T21<>\"P\",0,pcOfTargetAchieved(ROW(),$M21))","v":0},null,"P",{"$f":"IF($W21<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M21))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C22),Lookup!$E$9:$E$100,0))","v":1},"Access control","9c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q22<>\"P\",0,mySWITCH(INT($M22),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T22<>\"P\",0,pcOfTargetAchieved(ROW(),$M22))","v":0},null,"P",{"$f":"IF($W22<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M22))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C23),Lookup!$E$9:$E$100,0))","v":1},"Security in system procurements","9d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q23<>\"P\",0,mySWITCH(INT($M23),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T23<>\"P\",0,pcOfTargetAchieved(ROW(),$M23))","v":0},null,"P",{"$f":"IF($W23<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M23))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"ASSET MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C25),Lookup!$E$9:$E$100,0))","v":1},"Hardware assets register & management",{"$f":"Lookup!$F25","v":"4a"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q25<>\"P\",0,mySWITCH(INT($M25),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T25<>\"P\",0,pcOfTargetAchieved(ROW(),$M25))","v":0},null,"P",{"$f":"IF($W25<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M25))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C26),Lookup!$E$9:$E$100,0))","v":1},"Software assets register & management",{"$f":"Lookup!$F26","v":"4b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q26<>\"P\",0,mySWITCH(INT($M26),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T26<>\"P\",0,pcOfTargetAchieved(ROW(),$M26))","v":0},null,"P",{"$f":"IF($W26<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M26))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C27),Lookup!$E$9:$E$100,0))","v":1},"Infrastructure management",{"$f":"Lookup!$F27","v":"4c"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q27<>\"P\",0,mySWITCH(INT($M27),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T27<>\"P\",0,pcOfTargetAchieved(ROW(),$M27))","v":0},null,"P",{"$f":"IF($W27<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M27))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["PROTECT",null,"INFORMATION SECURITY MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C29),Lookup!$E$9:$E$100,0))","v":2},"Security policy & processes","1a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q29<>\"P\",0,mySWITCH(INT($M29),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T29<>\"P\",0,pcOfTargetAchieved(ROW(),$M29))","v":0},null,"P",{"$f":"IF($W29<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M29))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C30),Lookup!$E$9:$E$100,0))","v":2},"Lifecycle management","1b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q30<>\"P\",0,mySWITCH(INT($M30),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T30<>\"P\",0,pcOfTargetAchieved(ROW(),$M30))","v":0},null,"P",{"$f":"IF($W30<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M30))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Storage","1c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q31<>\"P\",0,mySWITCH(INT($M31),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T31<>\"P\",0,pcOfTargetAchieved(ROW(),$M31))","v":0},null,"P",{"$f":"IF($W31<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M31))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data classification","1f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q32<>\"P\",0,mySWITCH(INT($M32),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T32<>\"P\",0,pcOfTargetAchieved(ROW(),$M32))","v":0},null,"P",{"$f":"IF($W32<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M32))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Information assets register","1g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q33<>\"P\",0,mySWITCH(INT($M33),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T33<>\"P\",0,pcOfTargetAchieved(ROW(),$M33))","v":0},null,"P",{"$f":"IF($W33<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M33))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data transfer controls","1h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q34<>\"P\",0,mySWITCH(INT($M34),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T34<>\"P\",0,pcOfTargetAchieved(ROW(),$M34))","v":0},null,"P",{"$f":"IF($W34<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M34))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PEOPLE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Prior to employment","13a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q36<>\"P\",0,mySWITCH(INT($M36),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T36<>\"P\",0,pcOfTargetAchieved(ROW(),$M36))","v":0},null,"P",{"$f":"IF($W36<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M36))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C37),Lookup!$E$9:$E$100,0))","v":2},"During employment","13d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q37<>\"P\",0,mySWITCH(INT($M37),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T37<>\"P\",0,pcOfTargetAchieved(ROW(),$M37))","v":0},null,"P",{"$f":"IF($W37<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M37))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & awareness culture","13i",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q38<>\"P\",0,mySWITCH(INT($M38),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T38<>\"P\",0,pcOfTargetAchieved(ROW(),$M38))","v":0},null,"P",{"$f":"IF($W38<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M38))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff skills assessment","13j",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q39<>\"P\",0,mySWITCH(INT($M39),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T39<>\"P\",0,pcOfTargetAchieved(ROW(),$M39))","v":0},null,"P",{"$f":"IF($W39<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M39))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Mobile/remote working policy","13o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q40<>\"P\",0,mySWITCH(INT($M40),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T40<>\"P\",0,pcOfTargetAchieved(ROW(),$M40))","v":0},null,"P",{"$f":"IF($W40<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M40))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SERVICES RESILIENCE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Services Resilience","17a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q42<>\"P\",0,mySWITCH(INT($M42),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T42<>\"P\",0,pcOfTargetAchieved(ROW(),$M42))","v":0},null,"P",{"$f":"IF($W42<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M42))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ACCESS CONTROL",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Account management","3a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q44<>\"P\",0,mySWITCH(INT($M44),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T44<>\"P\",0,pcOfTargetAchieved(ROW(),$M44))","v":0},null,null,{"$f":"IF($W44<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M44))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C45),Lookup!$E$9:$E$100,0))","v":2},"Identity authentication","3b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q45<>\"P\",0,mySWITCH(INT($M45),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T45<>\"P\",0,pcOfTargetAchieved(ROW(),$M45))","v":0},null,"P",{"$f":"IF($W45<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M45))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C46),Lookup!$E$9:$E$100,0))","v":2},"Privilege management","3e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q46<>\"P\",0,mySWITCH(INT($M46),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T46<>\"P\",0,pcOfTargetAchieved(ROW(),$M46))","v":0},null,"P",{"$f":"IF($W46<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M46))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C47),Lookup!$E$9:$E$100,0))","v":2},"Administrator account management","3f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q47<>\"P\",0,mySWITCH(INT($M47),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T47<>\"P\",0,pcOfTargetAchieved(ROW(),$M47))","v":0},null,"P",{"$f":"IF($W47<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M47))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"MEDIA MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Storage media management","14a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q49<>\"P\",0,mySWITCH(INT($M49),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T49<>\"P\",0,pcOfTargetAchieved(ROW(),$M49))","v":0},null,"P",{"$f":"IF($W49<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M49))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C50),Lookup!$E$9:$E$100,0))","v":2},"Mobile media/devices","14b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q50<>\"P\",0,mySWITCH(INT($M50),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T50<>\"P\",0,pcOfTargetAchieved(ROW(),$M50))","v":0},null,"P",{"$f":"IF($W50<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M50))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C51),Lookup!$E$9:$E$100,0))","v":2},"Cryptography","14c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q51<>\"P\",0,mySWITCH(INT($M51),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T51<>\"P\",0,pcOfTargetAchieved(ROW(),$M51))","v":0},null,"P",{"$f":"IF($W51<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M51))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C52),Lookup!$E$9:$E$100,0))","v":2},"Remote wipe capability","14d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q52<>\"P\",0,mySWITCH(INT($M52),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T52<>\"P\",0,pcOfTargetAchieved(ROW(),$M52))","v":0},null,null,{"$f":"IF($W52<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M52))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ENVIRONMENTAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Equipment location","15a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q54<>\"P\",0,mySWITCH(INT($M54),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T54<>\"P\",0,pcOfTargetAchieved(ROW(),$M54))","v":0},null,"P",{"$f":"IF($W54<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M54))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C55),Lookup!$E$9:$E$100,0))","v":2},"Power resilience","15b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q55<>\"P\",0,mySWITCH(INT($M55),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T55<>\"P\",0,pcOfTargetAchieved(ROW(),$M55))","v":0},null,"P",{"$f":"IF($W55<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M55))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PHYSICAL/BUILDING SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Access control","5a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q57<>\"P\",0,mySWITCH(INT($M57),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T57<>\"P\",0,pcOfTargetAchieved(ROW(),$M57))","v":0},null,"P",{"$f":"IF($W57<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M57))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C58),Lookup!$E$9:$E$100,0))","v":2},"Internal security","5b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q58<>\"P\",0,mySWITCH(INT($M58),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T58<>\"P\",0,pcOfTargetAchieved(ROW(),$M58))","v":0},null,"P",{"$f":"IF($W58<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M58))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SYSTEM MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Secure configuration  ","6c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q60<>\"P\",0,mySWITCH(INT($M60),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T60<>\"P\",0,pcOfTargetAchieved(ROW(),$M60))","v":0},null,"P",{"$f":"IF($W60<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M60))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C61),Lookup!$E$9:$E$100,0))","v":2},"Secure design/development","6d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q61<>\"P\",0,mySWITCH(INT($M61),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T61<>\"P\",0,pcOfTargetAchieved(ROW(),$M61))","v":0},null,"P",{"$f":"IF($W61<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M61))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C62),Lookup!$E$9:$E$100,0))","v":2},"Change control procedures","6e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q62<>\"P\",0,mySWITCH(INT($M62),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T62<>\"P\",0,pcOfTargetAchieved(ROW(),$M62))","v":0},null,"P",{"$f":"IF($W62<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M62))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C63),Lookup!$E$9:$E$100,0))","v":2},"System Testing","6f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q63<>\"P\",0,mySWITCH(INT($M63),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T63<>\"P\",0,pcOfTargetAchieved(ROW(),$M63))","v":0},null,"P",{"$f":"IF($W63<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M63))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"OPERATIONAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Malware policies & protection","7a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q65<>\"P\",0,mySWITCH(INT($M65),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T65<>\"P\",0,pcOfTargetAchieved(ROW(),$M65))","v":0},null,null,{"$f":"IF($W65<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M65))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C66),Lookup!$E$9:$E$100,0))","v":2},"Email security","7e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q66<>\"P\",0,mySWITCH(INT($M66),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T66<>\"P\",0,pcOfTargetAchieved(ROW(),$M66))","v":0},null,null,{"$f":"IF($W66<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M66))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C67),Lookup!$E$9:$E$100,0))","v":2},"Application security","7f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q67<>\"P\",0,mySWITCH(INT($M67),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T67<>\"P\",0,pcOfTargetAchieved(ROW(),$M67))","v":0},null,"",{"$f":"IF($W67<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M67))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C68),Lookup!$E$9:$E$100,0))","v":2},"Vulnerability management & scanning","7h",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q68<>\"P\",0,mySWITCH(INT($M68),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T68<>\"P\",0,pcOfTargetAchieved(ROW(),$M68))","v":0},null,"P",{"$f":"IF($W68<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M68))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C69),Lookup!$E$9:$E$100,0))","v":2},"Data exfiltration monitoring","7k",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q69<>\"P\",0,mySWITCH(INT($M69),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T69<>\"P\",0,pcOfTargetAchieved(ROW(),$M69))","v":0},null,null,{"$f":"IF($W69<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M69))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C70),Lookup!$E$9:$E$100,0))","v":2},"Software supported & updated","7l",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q70<>\"P\",0,mySWITCH(INT($M70),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T70<>\"P\",0,pcOfTargetAchieved(ROW(),$M70))","v":0},null,"P",{"$f":"IF($W70<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M70))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C71),Lookup!$E$9:$E$100,0))","v":2},"Web site screening","7m",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q71<>\"P\",0,mySWITCH(INT($M71),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T71<>\"P\",0,pcOfTargetAchieved(ROW(),$M71))","v":0},null,"",{"$f":"IF($W71<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M71))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C72),Lookup!$E$9:$E$100,0))","v":2},"Browser management","7n",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q72<>\"P\",0,mySWITCH(INT($M72),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T72<>\"P\",0,pcOfTargetAchieved(ROW(),$M72))","v":0},null,"",{"$f":"IF($W72<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M72))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C73),Lookup!$E$9:$E$100,0))","v":2},"Monitor/audit user activity","7o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q73<>\"P\",0,mySWITCH(INT($M73),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T73<>\"P\",0,pcOfTargetAchieved(ROW(),$M73))","v":0},null,"P",{"$f":"IF($W73<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M73))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C74),Lookup!$E$9:$E$100,0))","v":2},"Disabled auto-run","7p",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q74<>\"P\",0,mySWITCH(INT($M74),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T74<>\"P\",0,pcOfTargetAchieved(ROW(),$M74))","v":0},null,"",{"$f":"IF($W74<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M74))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"NETWORK SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Patch management","8a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q76<>\"P\",0,mySWITCH(INT($M76),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T76<>\"P\",0,pcOfTargetAchieved(ROW(),$M76))","v":0},null,null,{"$f":"IF($W76<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M76))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Device management","8b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q77<>\"P\",0,mySWITCH(INT($M77),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T77<>\"P\",0,pcOfTargetAchieved(ROW(),$M77))","v":0},null,"P",{"$f":"IF($W77<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M77))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Content screening","8c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q78<>\"P\",0,mySWITCH(INT($M78),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T78<>\"P\",0,pcOfTargetAchieved(ROW(),$M78))","v":0},null,null,{"$f":"IF($W78<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M78))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Internal segregation","8d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q79<>\"P\",0,mySWITCH(INT($M79),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T79<>\"P\",0,pcOfTargetAchieved(ROW(),$M79))","v":0},null,"P",{"$f":"IF($W79<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M79))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Wireless security","8e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q80<>\"P\",0,mySWITCH(INT($M80),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T80<>\"P\",0,pcOfTargetAchieved(ROW(),$M80))","v":0},null,"",{"$f":"IF($W80<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M80))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Boundary/Firewall management","8f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q81<>\"P\",0,mySWITCH(INT($M81),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T81<>\"P\",0,pcOfTargetAchieved(ROW(),$M81))","v":0},null,"P",{"$f":"IF($W81<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M81))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Administrator control","8g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q82<>\"P\",0,mySWITCH(INT($M82),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T82<>\"P\",0,pcOfTargetAchieved(ROW(),$M82))","v":0},null,"P",{"$f":"IF($W82<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M82))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Error message management","8h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q83<>\"P\",0,mySWITCH(INT($M83),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T83<>\"P\",0,pcOfTargetAchieved(ROW(),$M83))","v":0},null,"",{"$f":"IF($W83<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M83))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Penetration testing","8i",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q84<>\"P\",0,mySWITCH(INT($M84),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T84<>\"P\",0,pcOfTargetAchieved(ROW(),$M84))","v":0},null,null,{"$f":"IF($W84<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M84))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"IP & DNS management","8j",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q85<>\"P\",0,mySWITCH(INT($M85),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T85<>\"P\",0,pcOfTargetAchieved(ROW(),$M85))","v":0},null,"P",{"$f":"IF($W85<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M85))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["DETECT",null,"INCIDENT DETECTION",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Detection capability","16a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q87<>\"P\",0,mySWITCH(INT($M87),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T87<>\"P\",0,pcOfTargetAchieved(ROW(),$M87))","v":0},null,"P",{"$f":"IF($W87<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M87))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Security Monitoring","16b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q88<>\"P\",0,mySWITCH(INT($M88),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T88<>\"P\",0,pcOfTargetAchieved(ROW(),$M88))","v":0},null,"P",{"$f":"IF($W88<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M88))","v":0},null,0,0,0,0,0,0,0,0,0]
["RESPOND & RECOVER",null,"INCIDENT MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Incident response protocol","10b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q90<>\"P\",0,mySWITCH(INT($M90),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T90<>\"P\",0,pcOfTargetAchieved(ROW(),$M90))","v":0},null,"P",{"$f":"IF($W90<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M90))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Incident reporting procedure","10c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q91<>\"P\",0,mySWITCH(INT($M91),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T91<>\"P\",0,pcOfTargetAchieved(ROW(),$M91))","v":0},null,null,{"$f":"IF($W91<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M91))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & testing","10d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q92<>\"P\",0,mySWITCH(INT($M92),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T92<>\"P\",0,pcOfTargetAchieved(ROW(),$M92))","v":0},null,null,{"$f":"IF($W92<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M92))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Post-incident review & learning","10e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q93<>\"P\",0,mySWITCH(INT($M93),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T93<>\"P\",0,pcOfTargetAchieved(ROW(),$M93))","v":0},null,"P",{"$f":"IF($W93<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M93))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BUSINESS CONTINUITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Data recover capability","12a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q95<>\"P\",0,mySWITCH(INT($M95),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T95<>\"P\",0,pcOfTargetAchieved(ROW(),$M95))","v":0},null,"P",{"$f":"IF($W95<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M95))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Back up policies & procedures","12b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q96<>\"P\",0,mySWITCH(INT($M96),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T96<>\"P\",0,pcOfTargetAchieved(ROW(),$M96))","v":0},null,"P",{"$f":"IF($W96<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M96))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Disaster recovery policies & procedures","12c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q97<>\"P\",0,mySWITCH(INT($M97),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T97<>\"P\",0,pcOfTargetAchieved(ROW(),$M97))","v":0},null,"P",{"$f":"IF($W97<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M97))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC/DR testing policies & procedures","12d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q98<>\"P\",0,mySWITCH(INT($M98),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T98<>\"P\",0,pcOfTargetAchieved(ROW(),$M98))","v":0},null,"P",{"$f":"IF($W98<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M98))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Data Loss impact assessments","12e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q99<>\"P\",0,mySWITCH(INT($M99),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T99<>\"P\",0,pcOfTargetAchieved(ROW(),$M99))","v":0},null,"P",{"$f":"IF($W99<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M99))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC contingency plan","12f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q100<>\"P\",0,mySWITCH(INT($M100),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T100<>\"P\",0,pcOfTargetAchieved(ROW(),$M100))","v":0},null,"P",{"$f":"IF($W100<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M100))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,"OVERALL TOTALS"]

{"sheet":"R05","index":6,"n_rows":101,"n_cols":35,"rows_kept":101,"cut":false,"hidden":false,"merged":[[85,0,87,0],[88,0,99,0],[100,13,100,24],[6,3,6,12],[7,0,26,0],[7,16,7,17],[7,19,7,20],[7,22,7,23],[27,0,84,0],[13,16,13,17],[13,19,13,20],[13,22,13,23],[18,16,18,17],[18,19,18,20],[18,22,18,23],[23,16,23,17],[5,3,5,12],[1,3,1,12],[2,3,2,12],[2,17,2,23],[3,3,3,12],[4,2,4,11],[23,19,23,20],[23,22,23,23],[27,16,27,17],[27,19,27,20],[27,22,27,23],[34,16,34,17],[34,19,34,20],[34,22,34,23],[40,16,40,17],[40,19,40,20],[40,22,40,23],[42,16,42,17],[42,19,42,20],[42,22,42,23],[47,16,47,17],[47,19,47,20],[47,22,47,23],[52,16,52,17],[52,19,52,20],[52,22,52,23],[55,16,55,17],[55,19,55,20],[55,22,55,23],[58,16,58,17],[58,19,58,20],[58,22,58,23],[63,16,63,17],[63,19,63,20],[63,22,63,23],[74,16,74,17],[74,19,74,20],[74,22,74,23],[85,16,85,17],[85,19,85,20],[85,22,85,23],[88,16,88,17],[88,19,88,20],[88,22,88,23],[93,16,93,17],[93,19,93,20],[93,22,93,23]]}
[null,null,"Report 5"]
[null,null,"Report Date:","2019-07-03"]
[null,null,"Assessor:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"RAG Status"]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,5,null,"PCI-DSS",null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[]
["MANAGE",null,"ORGANISATIONAL GOVERNANCE",null,null,"N/A","0",1,2,3,4,5,"Scored",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C9),Lookup!$E$9:$E$100,0))","v":1},"Governance framework",{"$f":"Lookup!F9","v":"2a"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q9<>\"P\",0,mySWITCH(INT($M9),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C10),Lookup!$E$9:$E$100,0))","v":1},"Leadership & responsibility",{"$f":"Lookup!F10","v":"2b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q10<>\"P\",0,mySWITCH(INT($M10),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T10<>\"P\",0,pcOfTargetAchieved(ROW(),$M10))","v":0},null,"P",{"$f":"IF($W10<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M10))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C11),Lookup!$E$9:$E$100,0))","v":1},"Adoption of assurance standards",{"$f":"Lookup!F11","v":"2e"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q11<>\"P\",0,mySWITCH(INT($M11),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T11<>\"P\",0,pcOfTargetAchieved(ROW(),$M11))","v":0},null,"P",{"$f":"IF($W11<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M11))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C12),Lookup!$E$9:$E$100,0))","v":1},"Information Asset Register",{"$f":"Lookup!F12","v":"2f"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q12<>\"P\",0,mySWITCH(INT($M12),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T12<>\"P\",0,pcOfTargetAchieved(ROW(),$M12))","v":0},null,"P",{"$f":"IF($W12<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M12))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C13),Lookup!$E$9:$E$100,0))","v":1},"Audit/assurance compliance",{"$f":"Lookup!F13","v":"2g"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q13<>\"P\",0,mySWITCH(INT($M13),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T13<>\"P\",0,pcOfTargetAchieved(ROW(),$M13))","v":0},null,"P",{"$f":"IF($W13<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M13))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"RISK MANAGEMENT",null,null,null,"0",1,2,3,4,5,null,null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C15),Lookup!$E$9:$E$100,0))","v":1},"Risk management policy & process","11a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q15<>\"P\",0,mySWITCH(INT($M15),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T15<>\"P\",0,pcOfTargetAchieved(ROW(),$M15))","v":0},null,"P",{"$f":"IF($W15<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M15))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C16),Lookup!$E$9:$E$100,0))","v":1},"Cyber / Information Risk Assessment","11b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q16<>\"P\",0,mySWITCH(INT($M16),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T16<>\"P\",0,pcOfTargetAchieved(ROW(),$M16))","v":0},null,"P",{"$f":"IF($W16<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M16))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C17),Lookup!$E$9:$E$100,0))","v":1},"Risk treatment & tolerance","11c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q17<>\"P\",0,mySWITCH(INT($M17),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T17<>\"P\",0,pcOfTargetAchieved(ROW(),$M17))","v":0},null,"P",{"$f":"IF($W17<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M17))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C18),Lookup!$E$9:$E$100,0))","v":1},"Risk governance","11d",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q18<>\"P\",0,mySWITCH(INT($M18),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T18<>\"P\",0,pcOfTargetAchieved(ROW(),$M18))","v":0},null,"P",{"$f":"IF($W18<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M18))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"SUPPLIER MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C20),Lookup!$E$9:$E$100,0))","v":1},"Supply chain security assurance & management","9a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q20<>\"P\",0,mySWITCH(INT($M20),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T20<>\"P\",0,pcOfTargetAchieved(ROW(),$M20))","v":0},null,null,{"$f":"IF($W20<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M20))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C21),Lookup!$E$9:$E$100,0))","v":1},"Roles & responsibilities defined","9b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q21<>\"P\",0,mySWITCH(INT($M21),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T21<>\"P\",0,pcOfTargetAchieved(ROW(),$M21))","v":0},null,"P",{"$f":"IF($W21<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M21))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C22),Lookup!$E$9:$E$100,0))","v":1},"Access control","9c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q22<>\"P\",0,mySWITCH(INT($M22),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T22<>\"P\",0,pcOfTargetAchieved(ROW(),$M22))","v":0},null,"P",{"$f":"IF($W22<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M22))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C23),Lookup!$E$9:$E$100,0))","v":1},"Security in system procurements","9d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q23<>\"P\",0,mySWITCH(INT($M23),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T23<>\"P\",0,pcOfTargetAchieved(ROW(),$M23))","v":0},null,"P",{"$f":"IF($W23<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M23))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"ASSET MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C25),Lookup!$E$9:$E$100,0))","v":1},"Hardware assets register & management",{"$f":"Lookup!$F25","v":"4a"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q25<>\"P\",0,mySWITCH(INT($M25),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T25<>\"P\",0,pcOfTargetAchieved(ROW(),$M25))","v":0},null,"P",{"$f":"IF($W25<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M25))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C26),Lookup!$E$9:$E$100,0))","v":1},"Software assets register & management",{"$f":"Lookup!$F26","v":"4b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q26<>\"P\",0,mySWITCH(INT($M26),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T26<>\"P\",0,pcOfTargetAchieved(ROW(),$M26))","v":0},null,"P",{"$f":"IF($W26<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M26))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C27),Lookup!$E$9:$E$100,0))","v":1},"Infrastructure management",{"$f":"Lookup!$F27","v":"4c"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q27<>\"P\",0,mySWITCH(INT($M27),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T27<>\"P\",0,pcOfTargetAchieved(ROW(),$M27))","v":0},null,"P",{"$f":"IF($W27<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M27))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["PROTECT",null,"INFORMATION SECURITY MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C29),Lookup!$E$9:$E$100,0))","v":2},"Security policy & processes","1a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q29<>\"P\",0,mySWITCH(INT($M29),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T29<>\"P\",0,pcOfTargetAchieved(ROW(),$M29))","v":0},null,"P",{"$f":"IF($W29<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M29))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C30),Lookup!$E$9:$E$100,0))","v":2},"Lifecycle management","1b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q30<>\"P\",0,mySWITCH(INT($M30),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T30<>\"P\",0,pcOfTargetAchieved(ROW(),$M30))","v":0},null,"P",{"$f":"IF($W30<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M30))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Storage","1c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q31<>\"P\",0,mySWITCH(INT($M31),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T31<>\"P\",0,pcOfTargetAchieved(ROW(),$M31))","v":0},null,"P",{"$f":"IF($W31<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M31))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data classification","1f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q32<>\"P\",0,mySWITCH(INT($M32),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T32<>\"P\",0,pcOfTargetAchieved(ROW(),$M32))","v":0},null,"P",{"$f":"IF($W32<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M32))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Information assets register","1g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q33<>\"P\",0,mySWITCH(INT($M33),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T33<>\"P\",0,pcOfTargetAchieved(ROW(),$M33))","v":0},null,"P",{"$f":"IF($W33<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M33))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data transfer controls","1h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q34<>\"P\",0,mySWITCH(INT($M34),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T34<>\"P\",0,pcOfTargetAchieved(ROW(),$M34))","v":0},null,"P",{"$f":"IF($W34<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M34))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PEOPLE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Prior to employment","13a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q36<>\"P\",0,mySWITCH(INT($M36),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T36<>\"P\",0,pcOfTargetAchieved(ROW(),$M36))","v":0},null,"P",{"$f":"IF($W36<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M36))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C37),Lookup!$E$9:$E$100,0))","v":2},"During employment","13d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q37<>\"P\",0,mySWITCH(INT($M37),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T37<>\"P\",0,pcOfTargetAchieved(ROW(),$M37))","v":0},null,"P",{"$f":"IF($W37<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M37))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & awareness culture","13i",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q38<>\"P\",0,mySWITCH(INT($M38),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T38<>\"P\",0,pcOfTargetAchieved(ROW(),$M38))","v":0},null,"P",{"$f":"IF($W38<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M38))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff skills assessment","13j",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q39<>\"P\",0,mySWITCH(INT($M39),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T39<>\"P\",0,pcOfTargetAchieved(ROW(),$M39))","v":0},null,"P",{"$f":"IF($W39<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M39))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Mobile/remote working policy","13o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q40<>\"P\",0,mySWITCH(INT($M40),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T40<>\"P\",0,pcOfTargetAchieved(ROW(),$M40))","v":0},null,"P",{"$f":"IF($W40<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M40))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SERVICES RESILIENCE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Services Resilience","17a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q42<>\"P\",0,mySWITCH(INT($M42),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T42<>\"P\",0,pcOfTargetAchieved(ROW(),$M42))","v":0},null,"P",{"$f":"IF($W42<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M42))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ACCESS CONTROL",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Account management","3a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q44<>\"P\",0,mySWITCH(INT($M44),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T44<>\"P\",0,pcOfTargetAchieved(ROW(),$M44))","v":0},null,null,{"$f":"IF($W44<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M44))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C45),Lookup!$E$9:$E$100,0))","v":2},"Identity authentication","3b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q45<>\"P\",0,mySWITCH(INT($M45),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T45<>\"P\",0,pcOfTargetAchieved(ROW(),$M45))","v":0},null,"P",{"$f":"IF($W45<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M45))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C46),Lookup!$E$9:$E$100,0))","v":2},"Privilege management","3e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q46<>\"P\",0,mySWITCH(INT($M46),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T46<>\"P\",0,pcOfTargetAchieved(ROW(),$M46))","v":0},null,"P",{"$f":"IF($W46<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M46))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C47),Lookup!$E$9:$E$100,0))","v":2},"Administrator account management","3f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q47<>\"P\",0,mySWITCH(INT($M47),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T47<>\"P\",0,pcOfTargetAchieved(ROW(),$M47))","v":0},null,"P",{"$f":"IF($W47<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M47))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"MEDIA MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Storage media management","14a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q49<>\"P\",0,mySWITCH(INT($M49),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T49<>\"P\",0,pcOfTargetAchieved(ROW(),$M49))","v":0},null,"P",{"$f":"IF($W49<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M49))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C50),Lookup!$E$9:$E$100,0))","v":2},"Mobile media/devices","14b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q50<>\"P\",0,mySWITCH(INT($M50),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T50<>\"P\",0,pcOfTargetAchieved(ROW(),$M50))","v":0},null,"P",{"$f":"IF($W50<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M50))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C51),Lookup!$E$9:$E$100,0))","v":2},"Cryptography","14c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q51<>\"P\",0,mySWITCH(INT($M51),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T51<>\"P\",0,pcOfTargetAchieved(ROW(),$M51))","v":0},null,"P",{"$f":"IF($W51<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M51))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C52),Lookup!$E$9:$E$100,0))","v":2},"Remote wipe capability","14d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q52<>\"P\",0,mySWITCH(INT($M52),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T52<>\"P\",0,pcOfTargetAchieved(ROW(),$M52))","v":0},null,null,{"$f":"IF($W52<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M52))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ENVIRONMENTAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Equipment location","15a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q54<>\"P\",0,mySWITCH(INT($M54),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T54<>\"P\",0,pcOfTargetAchieved(ROW(),$M54))","v":0},null,"P",{"$f":"IF($W54<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M54))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C55),Lookup!$E$9:$E$100,0))","v":2},"Power resilience","15b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q55<>\"P\",0,mySWITCH(INT($M55),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T55<>\"P\",0,pcOfTargetAchieved(ROW(),$M55))","v":0},null,"P",{"$f":"IF($W55<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M55))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PHYSICAL/BUILDING SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Access control","5a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q57<>\"P\",0,mySWITCH(INT($M57),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T57<>\"P\",0,pcOfTargetAchieved(ROW(),$M57))","v":0},null,"P",{"$f":"IF($W57<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M57))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C58),Lookup!$E$9:$E$100,0))","v":2},"Internal security","5b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q58<>\"P\",0,mySWITCH(INT($M58),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T58<>\"P\",0,pcOfTargetAchieved(ROW(),$M58))","v":0},null,"P",{"$f":"IF($W58<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M58))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SYSTEM MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Secure configuration  ","6c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q60<>\"P\",0,mySWITCH(INT($M60),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T60<>\"P\",0,pcOfTargetAchieved(ROW(),$M60))","v":0},null,"P",{"$f":"IF($W60<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M60))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C61),Lookup!$E$9:$E$100,0))","v":2},"Secure design/development","6d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q61<>\"P\",0,mySWITCH(INT($M61),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T61<>\"P\",0,pcOfTargetAchieved(ROW(),$M61))","v":0},null,"P",{"$f":"IF($W61<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M61))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C62),Lookup!$E$9:$E$100,0))","v":2},"Change control procedures","6e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q62<>\"P\",0,mySWITCH(INT($M62),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T62<>\"P\",0,pcOfTargetAchieved(ROW(),$M62))","v":0},null,"P",{"$f":"IF($W62<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M62))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C63),Lookup!$E$9:$E$100,0))","v":2},"System Testing","6f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q63<>\"P\",0,mySWITCH(INT($M63),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T63<>\"P\",0,pcOfTargetAchieved(ROW(),$M63))","v":0},null,"P",{"$f":"IF($W63<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M63))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"OPERATIONAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Malware policies & protection","7a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q65<>\"P\",0,mySWITCH(INT($M65),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T65<>\"P\",0,pcOfTargetAchieved(ROW(),$M65))","v":0},null,null,{"$f":"IF($W65<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M65))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C66),Lookup!$E$9:$E$100,0))","v":2},"Email security","7e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q66<>\"P\",0,mySWITCH(INT($M66),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T66<>\"P\",0,pcOfTargetAchieved(ROW(),$M66))","v":0},null,null,{"$f":"IF($W66<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M66))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C67),Lookup!$E$9:$E$100,0))","v":2},"Application security","7f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q67<>\"P\",0,mySWITCH(INT($M67),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T67<>\"P\",0,pcOfTargetAchieved(ROW(),$M67))","v":0},null,"",{"$f":"IF($W67<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M67))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C68),Lookup!$E$9:$E$100,0))","v":2},"Vulnerability management & scanning","7h",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q68<>\"P\",0,mySWITCH(INT($M68),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T68<>\"P\",0,pcOfTargetAchieved(ROW(),$M68))","v":0},null,"P",{"$f":"IF($W68<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M68))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C69),Lookup!$E$9:$E$100,0))","v":2},"Data exfiltration monitoring","7k",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q69<>\"P\",0,mySWITCH(INT($M69),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T69<>\"P\",0,pcOfTargetAchieved(ROW(),$M69))","v":0},null,null,{"$f":"IF($W69<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M69))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C70),Lookup!$E$9:$E$100,0))","v":2},"Software supported & updated","7l",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q70<>\"P\",0,mySWITCH(INT($M70),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T70<>\"P\",0,pcOfTargetAchieved(ROW(),$M70))","v":0},null,"P",{"$f":"IF($W70<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M70))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C71),Lookup!$E$9:$E$100,0))","v":2},"Web site screening","7m",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q71<>\"P\",0,mySWITCH(INT($M71),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T71<>\"P\",0,pcOfTargetAchieved(ROW(),$M71))","v":0},null,"",{"$f":"IF($W71<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M71))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C72),Lookup!$E$9:$E$100,0))","v":2},"Browser management","7n",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q72<>\"P\",0,mySWITCH(INT($M72),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T72<>\"P\",0,pcOfTargetAchieved(ROW(),$M72))","v":0},null,"",{"$f":"IF($W72<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M72))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C73),Lookup!$E$9:$E$100,0))","v":2},"Monitor/audit user activity","7o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q73<>\"P\",0,mySWITCH(INT($M73),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T73<>\"P\",0,pcOfTargetAchieved(ROW(),$M73))","v":0},null,"P",{"$f":"IF($W73<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M73))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C74),Lookup!$E$9:$E$100,0))","v":2},"Disabled auto-run","7p",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q74<>\"P\",0,mySWITCH(INT($M74),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T74<>\"P\",0,pcOfTargetAchieved(ROW(),$M74))","v":0},null,"",{"$f":"IF($W74<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M74))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"NETWORK SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Patch management","8a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q76<>\"P\",0,mySWITCH(INT($M76),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T76<>\"P\",0,pcOfTargetAchieved(ROW(),$M76))","v":0},null,null,{"$f":"IF($W76<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M76))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Device management","8b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q77<>\"P\",0,mySWITCH(INT($M77),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T77<>\"P\",0,pcOfTargetAchieved(ROW(),$M77))","v":0},null,"P",{"$f":"IF($W77<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M77))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Content screening","8c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q78<>\"P\",0,mySWITCH(INT($M78),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T78<>\"P\",0,pcOfTargetAchieved(ROW(),$M78))","v":0},null,null,{"$f":"IF($W78<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M78))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Internal segregation","8d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q79<>\"P\",0,mySWITCH(INT($M79),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T79<>\"P\",0,pcOfTargetAchieved(ROW(),$M79))","v":0},null,"P",{"$f":"IF($W79<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M79))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Wireless security","8e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q80<>\"P\",0,mySWITCH(INT($M80),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T80<>\"P\",0,pcOfTargetAchieved(ROW(),$M80))","v":0},null,"",{"$f":"IF($W80<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M80))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Boundary/Firewall management","8f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q81<>\"P\",0,mySWITCH(INT($M81),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T81<>\"P\",0,pcOfTargetAchieved(ROW(),$M81))","v":0},null,"P",{"$f":"IF($W81<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M81))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Administrator control","8g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q82<>\"P\",0,mySWITCH(INT($M82),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T82<>\"P\",0,pcOfTargetAchieved(ROW(),$M82))","v":0},null,"P",{"$f":"IF($W82<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M82))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Error message management","8h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q83<>\"P\",0,mySWITCH(INT($M83),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T83<>\"P\",0,pcOfTargetAchieved(ROW(),$M83))","v":0},null,"",{"$f":"IF($W83<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M83))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Penetration testing","8i",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q84<>\"P\",0,mySWITCH(INT($M84),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T84<>\"P\",0,pcOfTargetAchieved(ROW(),$M84))","v":0},null,null,{"$f":"IF($W84<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M84))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"IP & DNS management","8j",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q85<>\"P\",0,mySWITCH(INT($M85),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T85<>\"P\",0,pcOfTargetAchieved(ROW(),$M85))","v":0},null,"P",{"$f":"IF($W85<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M85))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["DETECT",null,"INCIDENT DETECTION",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Detection capability","16a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q87<>\"P\",0,mySWITCH(INT($M87),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T87<>\"P\",0,pcOfTargetAchieved(ROW(),$M87))","v":0},null,"P",{"$f":"IF($W87<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M87))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Security Monitoring","16b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q88<>\"P\",0,mySWITCH(INT($M88),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T88<>\"P\",0,pcOfTargetAchieved(ROW(),$M88))","v":0},null,"P",{"$f":"IF($W88<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M88))","v":0},null,0,0,0,0,0,0,0,0,0]
["RESPOND & RECOVER",null,"INCIDENT MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Incident response protocol","10b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q90<>\"P\",0,mySWITCH(INT($M90),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T90<>\"P\",0,pcOfTargetAchieved(ROW(),$M90))","v":0},null,"P",{"$f":"IF($W90<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M90))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Incident reporting procedure","10c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q91<>\"P\",0,mySWITCH(INT($M91),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T91<>\"P\",0,pcOfTargetAchieved(ROW(),$M91))","v":0},null,null,{"$f":"IF($W91<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M91))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & testing","10d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q92<>\"P\",0,mySWITCH(INT($M92),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T92<>\"P\",0,pcOfTargetAchieved(ROW(),$M92))","v":0},null,null,{"$f":"IF($W92<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M92))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Post-incident review & learning","10e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q93<>\"P\",0,mySWITCH(INT($M93),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T93<>\"P\",0,pcOfTargetAchieved(ROW(),$M93))","v":0},null,"P",{"$f":"IF($W93<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M93))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BUSINESS CONTINUITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Data recover capability","12a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q95<>\"P\",0,mySWITCH(INT($M95),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T95<>\"P\",0,pcOfTargetAchieved(ROW(),$M95))","v":0},null,"P",{"$f":"IF($W95<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M95))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Back up policies & procedures","12b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q96<>\"P\",0,mySWITCH(INT($M96),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T96<>\"P\",0,pcOfTargetAchieved(ROW(),$M96))","v":0},null,"P",{"$f":"IF($W96<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M96))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Disaster recovery policies & procedures","12c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q97<>\"P\",0,mySWITCH(INT($M97),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T97<>\"P\",0,pcOfTargetAchieved(ROW(),$M97))","v":0},null,"P",{"$f":"IF($W97<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M97))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC/DR testing policies & procedures","12d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q98<>\"P\",0,mySWITCH(INT($M98),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T98<>\"P\",0,pcOfTargetAchieved(ROW(),$M98))","v":0},null,"P",{"$f":"IF($W98<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M98))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Data Loss impact assessments","12e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q99<>\"P\",0,mySWITCH(INT($M99),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T99<>\"P\",0,pcOfTargetAchieved(ROW(),$M99))","v":0},null,"P",{"$f":"IF($W99<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M99))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC contingency plan","12f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q100<>\"P\",0,mySWITCH(INT($M100),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T100<>\"P\",0,pcOfTargetAchieved(ROW(),$M100))","v":0},null,"P",{"$f":"IF($W100<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M100))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,"OVERALL TOTALS"]

{"sheet":"R06","index":7,"n_rows":101,"n_cols":35,"rows_kept":101,"cut":false,"hidden":false,"merged":[[85,0,87,0],[88,0,99,0],[100,13,100,24],[6,3,6,12],[7,0,26,0],[7,16,7,17],[7,19,7,20],[7,22,7,23],[27,0,84,0],[13,16,13,17],[13,19,13,20],[13,22,13,23],[18,16,18,17],[18,19,18,20],[18,22,18,23],[23,16,23,17],[5,3,5,12],[1,3,1,12],[2,3,2,12],[2,17,2,23],[3,3,3,12],[4,2,4,11],[23,19,23,20],[23,22,23,23],[27,16,27,17],[27,19,27,20],[27,22,27,23],[34,16,34,17],[34,19,34,20],[34,22,34,23],[40,16,40,17],[40,19,40,20],[40,22,40,23],[42,16,42,17],[42,19,42,20],[42,22,42,23],[47,16,47,17],[47,19,47,20],[47,22,47,23],[52,16,52,17],[52,19,52,20],[52,22,52,23],[55,16,55,17],[55,19,55,20],[55,22,55,23],[58,16,58,17],[58,19,58,20],[58,22,58,23],[63,16,63,17],[63,19,63,20],[63,22,63,23],[74,16,74,17],[74,19,74,20],[74,22,74,23],[85,16,85,17],[85,19,85,20],[85,22,85,23],[88,16,88,17],[88,19,88,20],[88,22,88,23],[93,16,93,17],[93,19,93,20],[93,22,93,23]]}
[null,null,"Report 6"]
[null,null,"Report Date:","2019-07-11"]
[null,null,"Assessor:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"RAG Status"]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,5,null,"ISO 27001",null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}},null,null,{"$f":"myStageTotal(ROW(),COLUMN())","v":{"$error":"#NAME?"}}]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"SummaryOfMyColumn(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[]
["MANAGE",null,"ORGANISATIONAL GOVERNANCE",null,null,"N/A","0",1,2,3,4,5,"Scored",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C9),Lookup!$E$9:$E$100,0))","v":1},"Governance framework",{"$f":"Lookup!F9","v":"2a"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q9<>\"P\",0,mySWITCH(INT($M9),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,"P",{"$f":"IF($T9<>\"P\",0,pcOfTargetAchieved(ROW(),$M9))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C10),Lookup!$E$9:$E$100,0))","v":1},"Leadership & responsibility",{"$f":"Lookup!F10","v":"2b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q10<>\"P\",0,mySWITCH(INT($M10),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T10<>\"P\",0,pcOfTargetAchieved(ROW(),$M10))","v":0},null,"P",{"$f":"IF($W10<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M10))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C11),Lookup!$E$9:$E$100,0))","v":1},"Adoption of assurance standards",{"$f":"Lookup!F11","v":"2e"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q11<>\"P\",0,mySWITCH(INT($M11),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T11<>\"P\",0,pcOfTargetAchieved(ROW(),$M11))","v":0},null,"P",{"$f":"IF($W11<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M11))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C12),Lookup!$E$9:$E$100,0))","v":1},"Information Asset Register",{"$f":"Lookup!F12","v":"2f"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q12<>\"P\",0,mySWITCH(INT($M12),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T12<>\"P\",0,pcOfTargetAchieved(ROW(),$M12))","v":0},null,"P",{"$f":"IF($W12<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M12))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C13),Lookup!$E$9:$E$100,0))","v":1},"Audit/assurance compliance",{"$f":"Lookup!F13","v":"2g"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q13<>\"P\",0,mySWITCH(INT($M13),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T13<>\"P\",0,pcOfTargetAchieved(ROW(),$M13))","v":0},null,"P",{"$f":"IF($W13<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M13))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"RISK MANAGEMENT",null,null,null,"0",1,2,3,4,5,null,null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C15),Lookup!$E$9:$E$100,0))","v":1},"Risk management policy & process","11a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q15<>\"P\",0,mySWITCH(INT($M15),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T15<>\"P\",0,pcOfTargetAchieved(ROW(),$M15))","v":0},null,"P",{"$f":"IF($W15<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M15))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C16),Lookup!$E$9:$E$100,0))","v":1},"Cyber / Information Risk Assessment","11b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q16<>\"P\",0,mySWITCH(INT($M16),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T16<>\"P\",0,pcOfTargetAchieved(ROW(),$M16))","v":0},null,"P",{"$f":"IF($W16<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M16))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C17),Lookup!$E$9:$E$100,0))","v":1},"Risk treatment & tolerance","11c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q17<>\"P\",0,mySWITCH(INT($M17),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T17<>\"P\",0,pcOfTargetAchieved(ROW(),$M17))","v":0},null,"P",{"$f":"IF($W17<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M17))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C18),Lookup!$E$9:$E$100,0))","v":1},"Risk governance","11d",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q18<>\"P\",0,mySWITCH(INT($M18),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T18<>\"P\",0,pcOfTargetAchieved(ROW(),$M18))","v":0},null,"P",{"$f":"IF($W18<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M18))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"SUPPLIER MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C20),Lookup!$E$9:$E$100,0))","v":1},"Supply chain security assurance & management","9a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q20<>\"P\",0,mySWITCH(INT($M20),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T20<>\"P\",0,pcOfTargetAchieved(ROW(),$M20))","v":0},null,null,{"$f":"IF($W20<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M20))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C21),Lookup!$E$9:$E$100,0))","v":1},"Roles & responsibilities defined","9b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q21<>\"P\",0,mySWITCH(INT($M21),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T21<>\"P\",0,pcOfTargetAchieved(ROW(),$M21))","v":0},null,"P",{"$f":"IF($W21<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M21))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C22),Lookup!$E$9:$E$100,0))","v":1},"Access control","9c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q22<>\"P\",0,mySWITCH(INT($M22),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T22<>\"P\",0,pcOfTargetAchieved(ROW(),$M22))","v":0},null,"P",{"$f":"IF($W22<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M22))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C23),Lookup!$E$9:$E$100,0))","v":1},"Security in system procurements","9d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q23<>\"P\",0,mySWITCH(INT($M23),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T23<>\"P\",0,pcOfTargetAchieved(ROW(),$M23))","v":0},null,"P",{"$f":"IF($W23<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M23))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"ASSET MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C25),Lookup!$E$9:$E$100,0))","v":1},"Hardware assets register & management",{"$f":"Lookup!$F25","v":"4a"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q25<>\"P\",0,mySWITCH(INT($M25),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T25<>\"P\",0,pcOfTargetAchieved(ROW(),$M25))","v":0},null,"P",{"$f":"IF($W25<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M25))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C26),Lookup!$E$9:$E$100,0))","v":1},"Software assets register & management",{"$f":"Lookup!$F26","v":"4b"},0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q26<>\"P\",0,mySWITCH(INT($M26),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T26<>\"P\",0,pcOfTargetAchieved(ROW(),$M26))","v":0},null,"P",{"$f":"IF($W26<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M26))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C27),Lookup!$E$9:$E$100,0))","v":1},"Infrastructure management",{"$f":"Lookup!$F27","v":"4c"},0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q27<>\"P\",0,mySWITCH(INT($M27),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T27<>\"P\",0,pcOfTargetAchieved(ROW(),$M27))","v":0},null,"P",{"$f":"IF($W27<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M27))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["PROTECT",null,"INFORMATION SECURITY MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C29),Lookup!$E$9:$E$100,0))","v":2},"Security policy & processes","1a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q29<>\"P\",0,mySWITCH(INT($M29),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T29<>\"P\",0,pcOfTargetAchieved(ROW(),$M29))","v":0},null,"P",{"$f":"IF($W29<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M29))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C30),Lookup!$E$9:$E$100,0))","v":2},"Lifecycle management","1b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q30<>\"P\",0,mySWITCH(INT($M30),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T30<>\"P\",0,pcOfTargetAchieved(ROW(),$M30))","v":0},null,"P",{"$f":"IF($W30<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M30))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Storage","1c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q31<>\"P\",0,mySWITCH(INT($M31),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T31<>\"P\",0,pcOfTargetAchieved(ROW(),$M31))","v":0},null,"P",{"$f":"IF($W31<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M31))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data classification","1f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q32<>\"P\",0,mySWITCH(INT($M32),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T32<>\"P\",0,pcOfTargetAchieved(ROW(),$M32))","v":0},null,"P",{"$f":"IF($W32<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M32))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Information assets register","1g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q33<>\"P\",0,mySWITCH(INT($M33),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T33<>\"P\",0,pcOfTargetAchieved(ROW(),$M33))","v":0},null,"P",{"$f":"IF($W33<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M33))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Information/data transfer controls","1h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q34<>\"P\",0,mySWITCH(INT($M34),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T34<>\"P\",0,pcOfTargetAchieved(ROW(),$M34))","v":0},null,"P",{"$f":"IF($W34<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M34))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PEOPLE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Prior to employment","13a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q36<>\"P\",0,mySWITCH(INT($M36),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T36<>\"P\",0,pcOfTargetAchieved(ROW(),$M36))","v":0},null,"P",{"$f":"IF($W36<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M36))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C37),Lookup!$E$9:$E$100,0))","v":2},"During employment","13d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q37<>\"P\",0,mySWITCH(INT($M37),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T37<>\"P\",0,pcOfTargetAchieved(ROW(),$M37))","v":0},null,"P",{"$f":"IF($W37<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M37))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & awareness culture","13i",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q38<>\"P\",0,mySWITCH(INT($M38),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T38<>\"P\",0,pcOfTargetAchieved(ROW(),$M38))","v":0},null,"P",{"$f":"IF($W38<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M38))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff skills assessment","13j",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q39<>\"P\",0,mySWITCH(INT($M39),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T39<>\"P\",0,pcOfTargetAchieved(ROW(),$M39))","v":0},null,"P",{"$f":"IF($W39<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M39))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Mobile/remote working policy","13o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q40<>\"P\",0,mySWITCH(INT($M40),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T40<>\"P\",0,pcOfTargetAchieved(ROW(),$M40))","v":0},null,"P",{"$f":"IF($W40<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M40))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SERVICES RESILIENCE",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Services Resilience","17a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q42<>\"P\",0,mySWITCH(INT($M42),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T42<>\"P\",0,pcOfTargetAchieved(ROW(),$M42))","v":0},null,"P",{"$f":"IF($W42<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M42))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ACCESS CONTROL",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Account management","3a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q44<>\"P\",0,mySWITCH(INT($M44),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T44<>\"P\",0,pcOfTargetAchieved(ROW(),$M44))","v":0},null,null,{"$f":"IF($W44<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M44))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C45),Lookup!$E$9:$E$100,0))","v":2},"Identity authentication","3b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q45<>\"P\",0,mySWITCH(INT($M45),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T45<>\"P\",0,pcOfTargetAchieved(ROW(),$M45))","v":0},null,"P",{"$f":"IF($W45<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M45))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C46),Lookup!$E$9:$E$100,0))","v":2},"Privilege management","3e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q46<>\"P\",0,mySWITCH(INT($M46),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T46<>\"P\",0,pcOfTargetAchieved(ROW(),$M46))","v":0},null,"P",{"$f":"IF($W46<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M46))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C47),Lookup!$E$9:$E$100,0))","v":2},"Administrator account management","3f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q47<>\"P\",0,mySWITCH(INT($M47),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T47<>\"P\",0,pcOfTargetAchieved(ROW(),$M47))","v":0},null,"P",{"$f":"IF($W47<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M47))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"MEDIA MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Storage media management","14a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q49<>\"P\",0,mySWITCH(INT($M49),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T49<>\"P\",0,pcOfTargetAchieved(ROW(),$M49))","v":0},null,"P",{"$f":"IF($W49<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M49))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C50),Lookup!$E$9:$E$100,0))","v":2},"Mobile media/devices","14b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q50<>\"P\",0,mySWITCH(INT($M50),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T50<>\"P\",0,pcOfTargetAchieved(ROW(),$M50))","v":0},null,"P",{"$f":"IF($W50<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M50))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C51),Lookup!$E$9:$E$100,0))","v":2},"Cryptography","14c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q51<>\"P\",0,mySWITCH(INT($M51),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T51<>\"P\",0,pcOfTargetAchieved(ROW(),$M51))","v":0},null,"P",{"$f":"IF($W51<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M51))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C52),Lookup!$E$9:$E$100,0))","v":2},"Remote wipe capability","14d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q52<>\"P\",0,mySWITCH(INT($M52),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T52<>\"P\",0,pcOfTargetAchieved(ROW(),$M52))","v":0},null,null,{"$f":"IF($W52<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M52))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"ENVIRONMENTAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Equipment location","15a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q54<>\"P\",0,mySWITCH(INT($M54),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T54<>\"P\",0,pcOfTargetAchieved(ROW(),$M54))","v":0},null,"P",{"$f":"IF($W54<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M54))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C55),Lookup!$E$9:$E$100,0))","v":2},"Power resilience","15b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q55<>\"P\",0,mySWITCH(INT($M55),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"",{"$f":"IF($T55<>\"P\",0,pcOfTargetAchieved(ROW(),$M55))","v":0},null,"P",{"$f":"IF($W55<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M55))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"PHYSICAL/BUILDING SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Access control","5a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q57<>\"P\",0,mySWITCH(INT($M57),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T57<>\"P\",0,pcOfTargetAchieved(ROW(),$M57))","v":0},null,"P",{"$f":"IF($W57<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M57))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C58),Lookup!$E$9:$E$100,0))","v":2},"Internal security","5b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q58<>\"P\",0,mySWITCH(INT($M58),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T58<>\"P\",0,pcOfTargetAchieved(ROW(),$M58))","v":0},null,"P",{"$f":"IF($W58<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M58))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"SYSTEM MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,"Scores",{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Secure configuration  ","6c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q60<>\"P\",0,mySWITCH(INT($M60),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T60<>\"P\",0,pcOfTargetAchieved(ROW(),$M60))","v":0},null,"P",{"$f":"IF($W60<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M60))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C61),Lookup!$E$9:$E$100,0))","v":2},"Secure design/development","6d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q61<>\"P\",0,mySWITCH(INT($M61),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T61<>\"P\",0,pcOfTargetAchieved(ROW(),$M61))","v":0},null,"P",{"$f":"IF($W61<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M61))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C62),Lookup!$E$9:$E$100,0))","v":2},"Change control procedures","6e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q62<>\"P\",0,mySWITCH(INT($M62),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T62<>\"P\",0,pcOfTargetAchieved(ROW(),$M62))","v":0},null,"P",{"$f":"IF($W62<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M62))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C63),Lookup!$E$9:$E$100,0))","v":2},"System Testing","6f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q63<>\"P\",0,mySWITCH(INT($M63),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T63<>\"P\",0,pcOfTargetAchieved(ROW(),$M63))","v":0},null,"P",{"$f":"IF($W63<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M63))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"OPERATIONAL SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Malware policies & protection","7a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q65<>\"P\",0,mySWITCH(INT($M65),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T65<>\"P\",0,pcOfTargetAchieved(ROW(),$M65))","v":0},null,null,{"$f":"IF($W65<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M65))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C66),Lookup!$E$9:$E$100,0))","v":2},"Email security","7e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q66<>\"P\",0,mySWITCH(INT($M66),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T66<>\"P\",0,pcOfTargetAchieved(ROW(),$M66))","v":0},null,null,{"$f":"IF($W66<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M66))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C67),Lookup!$E$9:$E$100,0))","v":2},"Application security","7f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q67<>\"P\",0,mySWITCH(INT($M67),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T67<>\"P\",0,pcOfTargetAchieved(ROW(),$M67))","v":0},null,"",{"$f":"IF($W67<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M67))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C68),Lookup!$E$9:$E$100,0))","v":2},"Vulnerability management & scanning","7h",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q68<>\"P\",0,mySWITCH(INT($M68),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T68<>\"P\",0,pcOfTargetAchieved(ROW(),$M68))","v":0},null,"P",{"$f":"IF($W68<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M68))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C69),Lookup!$E$9:$E$100,0))","v":2},"Data exfiltration monitoring","7k",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q69<>\"P\",0,mySWITCH(INT($M69),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T69<>\"P\",0,pcOfTargetAchieved(ROW(),$M69))","v":0},null,null,{"$f":"IF($W69<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M69))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C70),Lookup!$E$9:$E$100,0))","v":2},"Software supported & updated","7l",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q70<>\"P\",0,mySWITCH(INT($M70),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T70<>\"P\",0,pcOfTargetAchieved(ROW(),$M70))","v":0},null,"P",{"$f":"IF($W70<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M70))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C71),Lookup!$E$9:$E$100,0))","v":2},"Web site screening","7m",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q71<>\"P\",0,mySWITCH(INT($M71),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T71<>\"P\",0,pcOfTargetAchieved(ROW(),$M71))","v":0},null,"",{"$f":"IF($W71<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M71))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C72),Lookup!$E$9:$E$100,0))","v":2},"Browser management","7n",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q72<>\"P\",0,mySWITCH(INT($M72),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T72<>\"P\",0,pcOfTargetAchieved(ROW(),$M72))","v":0},null,"",{"$f":"IF($W72<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M72))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C73),Lookup!$E$9:$E$100,0))","v":2},"Monitor/audit user activity","7o",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q73<>\"P\",0,mySWITCH(INT($M73),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T73<>\"P\",0,pcOfTargetAchieved(ROW(),$M73))","v":0},null,"P",{"$f":"IF($W73<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M73))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,{"$f":"INDEX(Lookup!$B$9:$B$100,MATCH(CELL(\"contents\",$C74),Lookup!$E$9:$E$100,0))","v":2},"Disabled auto-run","7p",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q74<>\"P\",0,mySWITCH(INT($M74),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T74<>\"P\",0,pcOfTargetAchieved(ROW(),$M74))","v":0},null,"",{"$f":"IF($W74<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M74))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"NETWORK SECURITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Patch management","8a",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q76<>\"P\",0,mySWITCH(INT($M76),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T76<>\"P\",0,pcOfTargetAchieved(ROW(),$M76))","v":0},null,null,{"$f":"IF($W76<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M76))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Device management","8b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q77<>\"P\",0,mySWITCH(INT($M77),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T77<>\"P\",0,pcOfTargetAchieved(ROW(),$M77))","v":0},null,"P",{"$f":"IF($W77<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M77))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Content screening","8c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q78<>\"P\",0,mySWITCH(INT($M78),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T78<>\"P\",0,pcOfTargetAchieved(ROW(),$M78))","v":0},null,null,{"$f":"IF($W78<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M78))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Internal segregation","8d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q79<>\"P\",0,mySWITCH(INT($M79),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T79<>\"P\",0,pcOfTargetAchieved(ROW(),$M79))","v":0},null,"P",{"$f":"IF($W79<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M79))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Wireless security","8e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q80<>\"P\",0,mySWITCH(INT($M80),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T80<>\"P\",0,pcOfTargetAchieved(ROW(),$M80))","v":0},null,"",{"$f":"IF($W80<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M80))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Boundary/Firewall management","8f",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q81<>\"P\",0,mySWITCH(INT($M81),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T81<>\"P\",0,pcOfTargetAchieved(ROW(),$M81))","v":0},null,"P",{"$f":"IF($W81<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M81))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Administrator control","8g",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q82<>\"P\",0,mySWITCH(INT($M82),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T82<>\"P\",0,pcOfTargetAchieved(ROW(),$M82))","v":0},null,"P",{"$f":"IF($W82<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M82))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Error message management","8h",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q83<>\"P\",0,mySWITCH(INT($M83),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T83<>\"P\",0,pcOfTargetAchieved(ROW(),$M83))","v":0},null,"",{"$f":"IF($W83<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M83))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Penetration testing","8i",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q84<>\"P\",0,mySWITCH(INT($M84),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T84<>\"P\",0,pcOfTargetAchieved(ROW(),$M84))","v":0},null,null,{"$f":"IF($W84<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M84))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"IP & DNS management","8j",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q85<>\"P\",0,mySWITCH(INT($M85),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T85<>\"P\",0,pcOfTargetAchieved(ROW(),$M85))","v":0},null,"P",{"$f":"IF($W85<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M85))","v":0},null,0,0,0,0,0,0,0,0,0,0]
["DETECT",null,"INCIDENT DETECTION",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Detection capability","16a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q87<>\"P\",0,mySWITCH(INT($M87),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T87<>\"P\",0,pcOfTargetAchieved(ROW(),$M87))","v":0},null,"P",{"$f":"IF($W87<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M87))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Security Monitoring","16b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q88<>\"P\",0,mySWITCH(INT($M88),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T88<>\"P\",0,pcOfTargetAchieved(ROW(),$M88))","v":0},null,"P",{"$f":"IF($W88<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M88))","v":0},null,0,0,0,0,0,0,0,0,0]
["RESPOND & RECOVER",null,"INCIDENT MANAGEMENT",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Incident response protocol","10b",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q90<>\"P\",0,mySWITCH(INT($M90),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T90<>\"P\",0,pcOfTargetAchieved(ROW(),$M90))","v":0},null,"P",{"$f":"IF($W90<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M90))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Incident reporting procedure","10c",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q91<>\"P\",0,mySWITCH(INT($M91),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T91<>\"P\",0,pcOfTargetAchieved(ROW(),$M91))","v":0},null,null,{"$f":"IF($W91<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M91))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Staff training & testing","10d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q92<>\"P\",0,mySWITCH(INT($M92),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T92<>\"P\",0,pcOfTargetAchieved(ROW(),$M92))","v":0},null,null,{"$f":"IF($W92<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M92))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Post-incident review & learning","10e",0,"™","™","™","™","™","™","™",0,null,null,null,"P",{"$f":"IF($Q93<>\"P\",0,mySWITCH(INT($M93),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T93<>\"P\",0,pcOfTargetAchieved(ROW(),$M93))","v":0},null,"P",{"$f":"IF($W93<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M93))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BUSINESS CONTINUITY",null,null,null,"0",1,2,3,4,5,"™",null,"COMMENTS",null,"Baseline",null,null,"Target",null,null,"Advanced",null,null,{"$f":"Lookup!X$6","v":"CE"},{"$f":"Lookup!Y$6","v":"PSAP"},{"$f":"Lookup!Z$6","v":"PSN - ITHC"},{"$f":"Lookup!AA$6","v":"PCI-DSS"},{"$f":"Lookup!AB$6","v":"10 Steps"},{"$f":"Lookup!AC$6","v":"GDPR"},{"$f":"Lookup!AD$6","v":"HMG SPF"},{"$f":"Lookup!AE$6","v":"ISO 27001"},{"$f":"Lookup!AF$6","v":"NIS - CAF"},{"$f":"Lookup!V6","v":"totals"}]
[null,null,"Data recover capability","12a",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q95<>\"P\",0,mySWITCH(INT($M95),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T95<>\"P\",0,pcOfTargetAchieved(ROW(),$M95))","v":0},null,"P",{"$f":"IF($W95<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M95))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Back up policies & procedures","12b",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q96<>\"P\",0,mySWITCH(INT($M96),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T96<>\"P\",0,pcOfTargetAchieved(ROW(),$M96))","v":0},null,"P",{"$f":"IF($W96<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M96))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"Disaster recovery policies & procedures","12c",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q97<>\"P\",0,mySWITCH(INT($M97),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T97<>\"P\",0,pcOfTargetAchieved(ROW(),$M97))","v":0},null,"P",{"$f":"IF($W97<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M97))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC/DR testing policies & procedures","12d",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q98<>\"P\",0,mySWITCH(INT($M98),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T98<>\"P\",0,pcOfTargetAchieved(ROW(),$M98))","v":0},null,"P",{"$f":"IF($W98<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M98))","v":0},null,0,0,0,0,0,0,0,0,0,0]
[null,null,"Data Loss impact assessments","12e",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q99<>\"P\",0,mySWITCH(INT($M99),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T99<>\"P\",0,pcOfTargetAchieved(ROW(),$M99))","v":0},null,"P",{"$f":"IF($W99<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M99))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,"BC contingency plan","12f",0,"™","™","™","™","™","™","™",0,null,null,null,"",{"$f":"IF($Q100<>\"P\",0,mySWITCH(INT($M100),0,0,0,1,1,2,2,3,2,4,2,5,2,6,2))","v":0},null,"P",{"$f":"IF($T100<>\"P\",0,pcOfTargetAchieved(ROW(),$M100))","v":0},null,"P",{"$f":"IF($W100<>\"P\",0,pcOfAdvancedAchieved(ROW(),$M100))","v":0},null,0,0,0,0,0,0,0,0,0]
[null,null,null,null,null,null,null,null,null,null,null,null,null,"OVERALL TOTALS"]

{"sheet":"Lookup","index":8,"n_rows":109,"n_cols":32,"rows_kept":109,"cut":false,"hidden":true,"merged":[[0,23,1,31],[102,0,102,4],[0,3,3,4],[100,0,100,11]]}
[null,null,null,"Lookup",null,null,null,null,null,"R02",null,null,null,null,null,null,null,null,null,null,null,null,null,"PRESETS"]
[]
[null,null,null,null,null,null,null,null,null,"CE","10 Steps","GDPR"]
[]
[]
["FRAMEWORK","Order",null,"Categories","Sub-Categories","Options »",1,2,3,4,5,"Weightings »",{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},"totals",null,{"$f":"INDEX(STANDARDLOOKUP,COLUMN()-23,1)","v":"CE"},{"$f":"INDEX(STANDARDLOOKUP,COLUMN()-23,1)","v":"PSAP"},"PSN - ITHC","PCI-DSS","10 Steps","GDPR","HMG SPF","ISO 27001","NIS - CAF"]
[]
[null,null,null,"ORGANISATIONAL GOVERNANCE",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D8))-1","v":5},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D8)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D8)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},0.71,{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D9,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D9,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D9,'Base-Lookup'!$G$2:$G$18,0))","v":1},"ORGANISATIONAL GOVERNANCE","Governance framework","2a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,{"$f":"MATCH(INDIRECT(ADDRESS(ROW(),5)),#REF!,0)","v":{"$error":"#REF!"}},0,0.2,0.33333333333333331,0.5,0.5,0,0.16666666666666666,0,null,0,4,1,2,0,0,1,1,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D10,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D10,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D10,'Base-Lookup'!$G$2:$G$18,0))","v":1},"ORGANISATIONAL GOVERNANCE","Leadership & responsibility","2b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0.2,0,0,0.5,0,0.16666666666666666,0,null,2,2,0,0,0,0,1,4,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D11,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D11,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D11,'Base-Lookup'!$G$2:$G$18,0))","v":1},"ORGANISATIONAL GOVERNANCE","Adoption of assurance standards","2e","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0.33333333333333331,0,0,0,0.16666666666666666,0,null,0,0,1,0,1,4,1,4,2]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D12,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D12,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D12,'Base-Lookup'!$G$2:$G$18,0))","v":1},"ORGANISATIONAL GOVERNANCE","Information Asset Register","2f","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0.5,0,0.5,0,0,null,0,2,1,0,0,0,0,0,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D13,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D13,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D13,'Base-Lookup'!$G$2:$G$18,0))","v":1},"ORGANISATIONAL GOVERNANCE","Audit/assurance compliance","2g","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,1,0,0.2,0,0,0,0.5,0.16666666666666666,0,null,1,0,0,0,4,0,0,3,2]
[null,null,null,"RISK MANAGEMENT",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D14))-1","v":4},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D14)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D14)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},4,4,5,5,{"$error":"#NAME?"},1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D9,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D15,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D15,'Base-Lookup'!$G$2:$G$18,0))","v":2},"RISK MANAGEMENT","Risk management policy & process","11a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0.125,0.125,0.125,0.125,0.2,0.125,0,null,0,3,3,4,0,1,4,4,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D10,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D16,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D16,'Base-Lookup'!$G$2:$G$18,0))","v":2},"RISK MANAGEMENT","Cyber / Information Risk Assessment","11b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,1,1,0.125,0.125,0.125,0.125,0.2,0.125,0,null,3,1,0,3,2,4,0,2,2]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D11,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D17,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D17,'Base-Lookup'!$G$2:$G$18,0))","v":2},"RISK MANAGEMENT","Risk treatment & tolerance","11c","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0.125,0.125,0.125,0.125,0.2,0.125,0,null,4,3,3,3,1,2,1,0,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D12,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D18,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D18,'Base-Lookup'!$G$2:$G$18,0))","v":2},"RISK MANAGEMENT","Risk governance","11d","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0.125,0.125,0.125,0.125,0.2,0.125,0,null,1,3,3,0,4,1,4,0,3]
[null,null,null,"SUPPLIER MANAGEMENT",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D19))-1","v":4},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D19)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D19)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},0.25,{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D9,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D20,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D20,'Base-Lookup'!$G$2:$G$18,0))","v":3},"SUPPLIER MANAGEMENT","Supply chain security assurance & management","9a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,1,0,1,0,1,0.5,0.5,0.33333333333333331,0,null,0,1,2,1,0,3,0,0,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D10,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D21,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D21,'Base-Lookup'!$G$2:$G$18,0))","v":3},"SUPPLIER MANAGEMENT","Roles & responsibilities defined","9b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0.5,0,0.33333333333333331,0,null,0,0,3,0,4,0,0,3,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D11,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D22,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D22,'Base-Lookup'!$G$2:$G$18,0))","v":3},"SUPPLIER MANAGEMENT","Access control","9c","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0,0,0.33333333333333331,0,null,0,2,0,3,0,0,1,1,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D12,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D23,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D23,'Base-Lookup'!$G$2:$G$18,0))","v":3},"SUPPLIER MANAGEMENT","Security in system procurements","9d","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0,0.5,0,0,null,0,4,0,0,0,3,1,0,4]
[null,null,null,"ASSET MANAGEMENT",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D24))-1","v":3},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D24)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D24)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},0.33,{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},3,6]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D9,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D25,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D25,'Base-Lookup'!$G$2:$G$18,0))","v":4},"ASSET MANAGEMENT","Hardware assets register & management","4a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,1,0,0.5,1,0.5,0.33333333333333331,0.33333333333333331,0,null,0,1,0,3,1,1,0,0,2]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D10,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D26,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D26,'Base-Lookup'!$G$2:$G$18,0))","v":4},"ASSET MANAGEMENT","Software assets register & management","4b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,1,0,0,1,0.5,0,0.5,0.33333333333333331,0.33333333333333331,0,null,0,0,0,0,2,0,0,3,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D11,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D27,'Base-Lookup'!$G$2:$G$18,0))","v":1},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D27,'Base-Lookup'!$G$2:$G$18,0))","v":4},"ASSET MANAGEMENT","Infrastructure management","4c","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0,0.33333333333333331,0.33333333333333331,0,null,2,0,0,1,1,2,0,2,0]
[null,null,null,"INFORMATION SECURITY MANAGEMENT",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D28))-1","v":6},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D28)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D28)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},5,{"$error":"#NAME?"},{"$error":"#NAME?"},6]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D14,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D29,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D29,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INFORMATION SECURITY MANAGEMENT","Security policy & processes","1a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.5,0.16666666666666666,0,0,0.125,0.16666666666666666,0.16666666666666666,0.125,0,null,4,0,3,0,1,0,2,3,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D15,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D30,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D30,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INFORMATION SECURITY MANAGEMENT","Lifecycle management","1b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0.16666666666666666,0,0.5,0.125,0.16666666666666666,0.16666666666666666,0.125,0,null,0,1,0,2,4,0,3,0,4]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D16,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D31,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D31,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INFORMATION SECURITY MANAGEMENT","Storage","1c","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0.16666666666666666,0,0,0.125,0.16666666666666666,0.16666666666666666,0.125,0,null,4,2,2,0,0,4,2,3,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D17,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D32,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D32,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INFORMATION SECURITY MANAGEMENT","Information/data classification","1f","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0.125,0.16666666666666666,0.16666666666666666,0.125,0,null,0,0,1,0,0,0,0,4,2]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D18,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D33,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D33,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INFORMATION SECURITY MANAGEMENT","Information assets register","1g","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0.125,0.16666666666666666,0.16666666666666666,0.125,0,null,0,1,1,3,0,2,0,0,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D19,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D34,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D34,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INFORMATION SECURITY MANAGEMENT","Information/data transfer controls","1h","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.5,0.16666666666666666,0,0.5,0.125,0.16666666666666666,0.16666666666666666,0.125,0,null,0,0,3,3,0,0,4,2,1]
[null,null,null,"PEOPLE",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D35))-1","v":5},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D35)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D35)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},0.31,{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D21,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D36,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D36,'Base-Lookup'!$G$2:$G$18,0))","v":2},"PEOPLE","Prior to employment","13a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0,0.1,0,0,null,3,0,0,4,1,3,1,0,4]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D22,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D37,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D37,'Base-Lookup'!$G$2:$G$18,0))","v":2},"PEOPLE","During employment","13d","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0,0.1,0,0,null,0,3,4,0,2,4,0,0,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D23,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D38,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D38,'Base-Lookup'!$G$2:$G$18,0))","v":2},"PEOPLE","Staff training & awareness culture","13i","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0.5,0.25,0.2,1,1,0.1,0.125,0,null,0,0,0,4,0,2,4,0,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D24,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D39,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D39,'Base-Lookup'!$G$2:$G$18,0))","v":2},"PEOPLE","Staff skills assessment","13j","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0.2,0,0,0,0,0,null,2,2,0,0,1,0,0,3,2]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D25,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D40,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D40,'Base-Lookup'!$G$2:$G$18,0))","v":2},"PEOPLE","Mobile/remote working policy","13o","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.33333333333333331,0,0,0,0,0,0.1,0.125,0,null,2,0,0,1,0,2,0,0,2]
[null,null,null,"SERVICES RESILIENCE",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D41))-1","v":1},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D41)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},3,6,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D27,'Base-Lookup'!$G$2:$G$18,0))","v":"MANAGE"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D42,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D42,'Base-Lookup'!$G$2:$G$18,0))","v":3},"SERVICES RESILIENCE","Services Resilience","17a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,1,1,1,0,null,1,1,3,4,0,0,2,3,0]
[null,null,null,"ACCESS CONTROL",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D43))-1","v":4},null,null,"corrective actions are being implemented but have not taken effect yet",null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D43)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D43)","v":{"$error":"#NAME?"}},6,0.01,{"$f":"standardComplianceLevel(COLUMN(),$D43)","v":{"$error":"#NAME?"}},2,6,3,{"$f":"standardComplianceLevel(COLUMN(),$D43)","v":{"$error":"#NAME?"}}]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D28,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D44,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D44,'Base-Lookup'!$G$2:$G$18,0))","v":4},"ACCESS CONTROL","Account management","3a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.2,0.2,0.16666666666666666,0.16666666666666666,0.25,0.16666666666666666,0.16666666666666666,0.16666666666666666,0.2,0,null,3,3,0,1,0,1,1,1,2]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D29,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D45,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D45,'Base-Lookup'!$G$2:$G$18,0))","v":4},"ACCESS CONTROL","Identity authentication","3b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.2,0.2,0.16666666666666666,0.16666666666666666,0.25,0.16666666666666666,0.16666666666666666,0.16666666666666666,0.2,0,null,0,0,3,0,0,0,0,0,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D30,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D46,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D46,'Base-Lookup'!$G$2:$G$18,0))","v":4},"ACCESS CONTROL","Privilege management","3e","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.2,0.2,0.16666666666666666,0.16666666666666666,0.25,0.16666666666666666,0.16666666666666666,0.16666666666666666,0.2,0,null,3,1,0,0,0,4,0,0,2]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D31,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D47,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D47,'Base-Lookup'!$G$2:$G$18,0))","v":4},"ACCESS CONTROL","Administrator account management","3f","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.2,0.2,0.16666666666666666,0.16666666666666666,0.25,0.16666666666666666,0.16666666666666666,0.16666666666666666,0.2,0,null,0,0,0,0,1,4,0,2,0]
[null,null,null,"MEDIA MANAGEMENT",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D48))-1","v":4},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D48)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D48)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},0,{"$error":"#NAME?"},{"$error":"#NAME?"},1,{"$error":"#NAME?"},3]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D33,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D49,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D49,'Base-Lookup'!$G$2:$G$18,0))","v":5},"MEDIA MANAGEMENT","Storage media management","14a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ","Mobile media/devices",0,0,0.5,0,0.33333333333333331,0.33333333333333331,0.25,0.33333333333333331,0.25,0,null,1,2,3,0,2,0,4,0,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D34,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D50,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D50,'Base-Lookup'!$G$2:$G$18,0))","v":5},"MEDIA MANAGEMENT","Mobile media/devices","14b"]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D35,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D51,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D51,'Base-Lookup'!$G$2:$G$18,0))","v":5},"MEDIA MANAGEMENT","Cryptography","14c","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0.5,0,0.33333333333333331,0.33333333333333331,0.25,0.33333333333333331,0.25,0,null,0,2,2,0,0,2,4,2,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D36,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D52,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D52,'Base-Lookup'!$G$2:$G$18,0))","v":5},"MEDIA MANAGEMENT","Remote wipe capability","14d","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0.25,0,0.25,0,null,0,0,2,0,2,1,0,4,3]
[null,null,null,"ENVIRONMENTAL SECURITY",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D53))-1","v":2},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D53)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D53)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},0,{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},3,{"$error":"#NAME?"}]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D38,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D54,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D54,'Base-Lookup'!$G$2:$G$18,0))","v":6},"ENVIRONMENTAL SECURITY","Equipment location","15a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0,0.5,0,0,null,2,0,1,0,2,3,1,0,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D39,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D55,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D55,'Base-Lookup'!$G$2:$G$18,0))","v":6},"ENVIRONMENTAL SECURITY","Power resilience","15b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0,0.5,1,0,null,1,3,0,0,1,0,1,2,2]
[null,null,null,"PHYSICAL/BUILDING SECURITY",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D56))-1","v":2},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D56)","v":{"$error":"#NAME?"}},6,6,0,{"$f":"standardComplianceLevel(COLUMN(),$D56)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D56)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D56)","v":{"$error":"#NAME?"}},5,{"$f":"standardComplianceLevel(COLUMN(),$D56)","v":{"$error":"#NAME?"}}]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D41,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D57,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D57,'Base-Lookup'!$G$2:$G$18,0))","v":7},"PHYSICAL/BUILDING SECURITY","Access control","5a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.5,0.5,0,0,0,0,0.5,0,0,null,0,2,4,2,4,0,0,2,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D42,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D58,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D58,'Base-Lookup'!$G$2:$G$18,0))","v":7},"PHYSICAL/BUILDING SECURITY","Internal security","5b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.5,0.5,0,0,0,0,0.5,0,0,null,4,4,3,4,0,4,0,3,2]
[null,null,null,"SYSTEM MANAGEMENT",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D59))-1","v":4},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D59)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D59)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},0.25,{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},1,6]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D44,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D60,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D60,'Base-Lookup'!$G$2:$G$18,0))","v":8},"SYSTEM MANAGEMENT","Secure configuration  ","6c","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,1,0.5,0,1,0.5,0.33333333333333331,0.5,0.25,0.25,0,null,4,1,4,0,1,0,1,0,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D45,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D61,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D61,'Base-Lookup'!$G$2:$G$18,0))","v":8},"SYSTEM MANAGEMENT","Secure design/development","6d","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0.5,0,0,0,0,0.25,0.25,0,null,2,0,0,0,3,0,2,4,3]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D46,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D62,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D62,'Base-Lookup'!$G$2:$G$18,0))","v":8},"SYSTEM MANAGEMENT","Change control procedures","6e","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0.5,0.33333333333333331,0,0.25,0.25,0,null,1,2,0,0,0,0,0,0,2]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D47,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D63,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D63,'Base-Lookup'!$G$2:$G$18,0))","v":8},"SYSTEM MANAGEMENT","System Testing","6f","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.5,0.5,0,0,0.33333333333333331,0.5,0.25,0.25,0,null,0,3,1,1,1,2,4,0,1]
[null,null,null,"OPERATIONAL SECURITY",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D64))-1","v":10},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D64)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D64)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},0.6,{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D49,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D65,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D65,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Malware policies & protection","7a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.125,0.2,0.2,0.125,7.6923076923076927E-2,7.6923076923076927E-2,0.125,0.14285714285714285,0.16666666666666666,0,null,0,1,0,1,1,4,1,2,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D50,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D66,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D66,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Email security","7e","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0.125,0.14285714285714285,0,0,null,0,0,4,4,1,0,1,2,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D51,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D67,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D67,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Application security","7f","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0.125,0,0,0,null,1,0,2,0,1,3,1,4,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D52,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D68,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D68,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Vulnerability management & scanning","7h","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.2,0.2,0.125,7.6923076923076927E-2,7.6923076923076927E-2,0.125,0.14285714285714285,0.16666666666666666,0,null,1,0,2,2,3,3,2,0,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D53,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D69,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D69,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Data exfiltration monitoring","7k","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,7.6923076923076927E-2,7.6923076923076927E-2,0,0,0,0,null,0,0,0,1,0,4,0,0,4]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D54,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D70,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D70,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Software supported & updated","7l","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.125,0,0.2,0.125,7.6923076923076927E-2,7.6923076923076927E-2,0.125,0,0.16666666666666666,0,null,2,4,1,0,3,0,0,2,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D55,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D71,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D71,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Web site screening","7m","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.125,0,0,0.125,7.6923076923076927E-2,7.6923076923076927E-2,0,0,0,0,null,0,2,0,0,0,1,4,2,3]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D56,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D72,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D72,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Browser management","7n","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,7.6923076923076927E-2,7.6923076923076927E-2,0,0,0,0,null,1,0,3,1,0,1,0,3,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D57,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D73,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D73,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Monitor/audit user activity","7o","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0.2,0,7.6923076923076927E-2,7.6923076923076927E-2,0,0.14285714285714285,0.16666666666666666,0,null,1,0,0,1,0,4,4,3,3]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D58,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D74,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D74,'Base-Lookup'!$G$2:$G$18,0))","v":9},"OPERATIONAL SECURITY","Disabled auto-run","7p","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.125,0,0,0,7.6923076923076927E-2,7.6923076923076927E-2,0,0,0,0,null,4,0,3,0,1,3,3,1,0]
[null,null,null,"NETWORK SECURITY",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D75))-1","v":10},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D75)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D75)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},0.2,{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D60,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D76,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D76,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","Patch management","8a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.5,0.25,0.33333333333333331,0.5,0.1111111111111111,0.1111111111111111,0.2,0,0.125,0,null,0,2,0,0,0,1,0,2,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D61,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D77,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D77,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","Device management","8b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.25,0,0,0.1111111111111111,0.1111111111111111,0.2,0,0.125,0,null,0,0,0,0,0,4,0,0,4]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D62,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D78,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D78,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","Content screening","8c","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0.1111111111111111,0.1111111111111111,0,0,0.125,0,null,0,0,0,2,1,4,1,1,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D63,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D79,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D79,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","Internal segregation","8d","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0.1111111111111111,0.1111111111111111,0,1,0.125,0,null,0,0,3,1,1,0,0,4,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D64,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D80,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D80,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","Wireless security","8e","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0.1111111111111111,0.1111111111111111,0,0,0,0,null,0,1,0,3,2,3,0,0,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D65,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D81,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D81,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","Boundary/Firewall management","8f","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0.5,0.25,0.33333333333333331,0.5,0.1111111111111111,0.1111111111111111,0,0,0.125,0,null,0,0,1,3,2,2,0,0,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D66,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D82,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D82,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","Administrator control","8g","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0.1111111111111111,0.1111111111111111,0.2,0,0.125,0,null,4,3,0,1,2,4,1,1,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D67,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D83,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D83,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","Error message management","8h","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0.1111111111111111,0.1111111111111111,0,0,0,0,null,1,3,4,1,4,0,3,4,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D68,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D84,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D84,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","Penetration testing","8i","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.25,0.33333333333333331,0,0.1111111111111111,0.1111111111111111,0.2,0,0.125,0,null,4,0,2,1,0,1,2,2,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D69,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D85,'Base-Lookup'!$G$2:$G$18,0))","v":2},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D85,'Base-Lookup'!$G$2:$G$18,0))","v":10},"NETWORK SECURITY","IP & DNS management","8j","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0.2,0,0.125,0,null,0,2,3,0,1,4,1,1,0]
[null,null,null,"INCIDENT DETECTION",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D86))-1","v":2},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D86)","v":{"$error":"#NAME?"}},3,{"$f":"standardComplianceLevel(COLUMN(),$D86)","v":{"$error":"#NAME?"}},0,{"$f":"standardComplianceLevel(COLUMN(),$D86)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D86)","v":{"$error":"#NAME?"}},4,4,3]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D71,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D87,'Base-Lookup'!$G$2:$G$18,0))","v":3},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D87,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INCIDENT DETECTION","Detection capability","16a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.5,0,0,0,0,0.5,0.5,0.5,0,null,1,0,1,2,0,1,1,1,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D72,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D88,'Base-Lookup'!$G$2:$G$18,0))","v":3},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D88,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INCIDENT DETECTION","Security Monitoring","16b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.5,0,0,1,1,0.5,0.5,0.5,0,null,2,0,2,3,0,0,0,3,0]
[null,null,null,"INCIDENT MANAGEMENT",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D89))-1","v":4},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D89)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D89)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D89)","v":{"$error":"#NAME?"}},0.75,1,1,4,5,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D74,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D90,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D90,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INCIDENT MANAGEMENT","Incident response protocol","10b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.33333333333333331,1,0.33333333333333331,0.25,0.25,0.25,0.25,0.25,0,null,1,0,0,3,0,0,0,0,4]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D75,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D91,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D91,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INCIDENT MANAGEMENT","Incident reporting procedure","10c","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.33333333333333331,0,0.33333333333333331,0.25,0.25,0.25,0.25,0.25,0,null,0,4,0,0,1,0,1,1,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D76,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D92,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D92,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INCIDENT MANAGEMENT","Staff training & testing","10d","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0.25,0.25,0.25,0.25,0.25,0,null,0,2,0,0,0,0,0,1,2]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D77,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D93,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D93,'Base-Lookup'!$G$2:$G$18,0))","v":1},"INCIDENT MANAGEMENT","Post-incident review & learning","10e","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0.33333333333333331,0,0.33333333333333331,0.25,0.25,0.25,0.25,0.25,0,null,2,1,0,2,4,1,0,3,0]
[null,null,null,"BUSINESS CONTINUITY",{"$f":"COUNTIF($D:$D,CELL(\"contents\",$D94))-1","v":6},null,null,null,null,null,null,"Total Points Available »",{"$f":"standardComplianceLevel(COLUMN(),$D94)","v":{"$error":"#NAME?"}},{"$f":"standardComplianceLevel(COLUMN(),$D94)","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},6,{"$error":"#NAME?"},6]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D79,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D95,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D95,'Base-Lookup'!$G$2:$G$18,0))","v":2},"BUSINESS CONTINUITY","Data recover capability","12a","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0.25,0.16666666666666666,0.2,0.16666666666666666,0,null,0,1,0,3,1,0,2,3,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D80,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D96,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D96,'Base-Lookup'!$G$2:$G$18,0))","v":2},"BUSINESS CONTINUITY","Back up policies & procedures","12b","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0.25,0.16666666666666666,0.2,0.16666666666666666,0,null,0,2,2,3,3,0,4,3,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D81,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D97,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D97,'Base-Lookup'!$G$2:$G$18,0))","v":2},"BUSINESS CONTINUITY","Disaster recovery policies & procedures","12c","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0.25,0.16666666666666666,0.2,0.16666666666666666,0,null,0,0,0,0,0,1,1,0,1]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D82,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D98,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D98,'Base-Lookup'!$G$2:$G$18,0))","v":2},"BUSINESS CONTINUITY","BC/DR testing policies & procedures","12d","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0.25,0.16666666666666666,0.2,0.16666666666666666,0,null,0,1,0,1,1,4,1,0,4]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D83,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D99,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D99,'Base-Lookup'!$G$2:$G$18,0))","v":2},"BUSINESS CONTINUITY","Data Loss impact assessments","12e","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0.16666666666666666,0,0.16666666666666666,0,null,0,1,4,0,2,0,0,3,0]
[{"$f":"INDEX('Base-Lookup'!$H$2:$H$18,MATCH($D84,'Base-Lookup'!$G$2:$G$18,0))","v":"PROTECT"},{"$f":"INDEX('Base-Lookup'!$E$2:$E$18,MATCH($D100,'Base-Lookup'!$G$2:$G$18,0))","v":4},{"$f":"INDEX('Base-Lookup'!$F$2:$F$18,MATCH($D100,'Base-Lookup'!$G$2:$G$18,0))","v":2},"BUSINESS CONTINUITY","BC contingency plan","12f","Few control categories  in place with no corrective actions implemented ","minimal categories  practices/controls in place. ","most control categories  in place, documentation and evidence incomplete","all control categories  in place, documentation and evidence almost complete ","Best practices adopted across all categories  and can be demonstrated on audit with documentation ",null,0,0,0,0,0,0,0.16666666666666666,0.2,0.16666666666666666,0,null,0,0,0,0,2,1,4,3,1]
["OVERALL:",null,null,null,null,null,null,null,null,null,null,null,0,0.5,0.8,0.3,1,1,0.9,0.1,null,null,null,0,0.5,0.8,0.3,1,1,0.9,0.1]
[null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},null,null,null,{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
["Relative cat compliance mean thresholds",null,null,null,null,null,null,null,null,null,null,null,0.11875000000000001,0.47374084249084253,0.5549565018315018,0.30095581501831503,0.79724130036630048,0.61328983516483515,0.75163118131868134,0.32784455128205126,null,null,null,0.11875000000000001,0.47374084249084253,0.5549565018315018,0.30095581501831503,0.79724130036630048,0.61328983516483515,0.75163118131868134,0.32784455128205126]
[{"$f":"'R01'!$D$2","v":"2019-06-07"},null,null,{"$f":"TEXT(A104,\"dd/mm/yyyy\")","v":"07/06/2019"},null,null,null,null,null,null,null,null,{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},null,null,null,{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$f":"standardName(COLUMN())","v":{"$error":"#NAME?"}},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"},{"$error":"#NAME?"}]
[{"$f":"'R02'!$D$2","v":"2019-06-12"},null,null,{"$f":"TEXT(A105,\"dd/mm/yyyy\")","v":"12/06/2019"},null,null,null,null,null,null,null,null,"Basic","Base Target","Target",null,"Advanced","Upper Target","Advanced",null,null,null,null,"Basic","Base Target","Target",null,"Advanced","Upper Target","Advanced"]
[{"$f":"'R03'!$D$2","v":"2019-06-21"},null,null,"21/06/2019","% subcategories",null,null,null,null,null,null,null,0.16161616161616163,0.56565656565656564,0.64646464646464652,0.31313131313131315,0.77777777777777779,0.59595959595959591,0.64646464646464652,0.31313131313131315,null,null,null,0.16161616161616163,0.56565656565656564,0.64646464646464652,0.31313131313131315,0.77777777777777779,0.59595959595959591,0.64646464646464652,0.31313131313131315]
[{"$f":"'R04'!$D$2","v":"2019-06-26"},null,null,"26/06/2019"]
[{"$f":"'R05'!$D$2","v":"2019-07-03"},null,null,"03/07/2019"]
[{"$f":"'R06'!$D$2","v":"2019-07-11"},null,null,"11/07/2019"]

{"sheet":"Base-Lookup","index":9,"n_rows":39,"n_cols":31,"rows_kept":39,"cut":false,"hidden":true,"merged":[[28,14,28,30]]}
["Frameworks","order",null,null,"nb","order","Categories","Framework",null,"R02"]
["MANAGE",1,null,null,{"$f":"VLOOKUP($H2,$A$2:$B$5,2)","v":1},1,"ORGANISATIONAL GOVERNANCE","MANAGE"]
["PROTECT",2,null,null,1,2,"RISK MANAGEMENT","MANAGE"]
["DETECT",3,null,null,1,3,"SUPPLIER MANAGEMENT","MANAGE"]
["RESPOND & RECOVER",4,null,null,1,4,"ASSET MANAGEMENT","MANAGE"]
[null,null,null,null,2,1,"INFORMATION SECURITY MANAGEMENT","PROTECT"]
[null,null,null,null,2,2,"PEOPLE","PROTECT"]
[null,null,null,null,2,3,"SERVICES RESILIENCE","PROTECT"]
[null,null,null,null,2,4,"ACCESS CONTROL","PROTECT"]
[null,null,null,null,2,5,"MEDIA MANAGEMENT","PROTECT"]
[null,null,null,null,2,6,"ENVIRONMENTAL SECURITY","PROTECT"]
[null,null,null,null,2,7,"PHYSICAL/BUILDING SECURITY","PROTECT"]
[null,null,null,null,2,8,"SYSTEM MANAGEMENT","PROTECT"]
[null,null,null,null,2,9,"OPERATIONAL SECURITY","PROTECT"]
[null,null,null,null,2,10,"NETWORK SECURITY","PROTECT"]
[null,null,null,null,3,1,"INCIDENT DETECTION","DETECT"]
[null,null,null,null,{"$f":"VLOOKUP($H17,$A$2:$B$5,2)","v":4},1,"INCIDENT MANAGEMENT","RESPOND & RECOVER"]
[null,null,null,null,{"$f":"VLOOKUP($H18,$A$2:$B$5,2)","v":4},2,"BUSINESS CONTINUITY","RESPOND & RECOVER"]
[null,null,null,null,18,{"$f":"F18+1","v":3}]
[null,null,null,null,19,4]
[null,null,null,null,20,5]
[null,null,null,null,21,6]
[null,null,null,null,22,7]
[null,null,null,null,23,8]
[null,null,null,null,24,9]
[null,null,null,null,25,10]
[]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Categories"]
[null,null,null,null,null,null,null,null,null,null,null,null,"NB","Standards","ORGANISATIONAL GOVERNANCE","RISK MANAGEMENT","SUPPLIER MANAGEMENT","ASSET MANAGEMENT","INFORMATION SECURITY MANAGEMENT","PEOPLE","SERVICES RESILIENCE","ACCESS CONTROL","MEDIA MANAGEMENT","ENVIRONMENTAL SECURITY","PHYSICAL/BUILDING SECURITY","SYSTEM MANAGEMENT","OPERATIONAL SECURITY","NETWORK SECURITY","INCIDENT DETECTION","INCIDENT MANAGEMENT","BUSINESS CONTINUITY"]
[null,null,null,null,null,null,null,null,null,null,null,null,1,"CE",0,0,0,0.33333333333333331,0,0,0,0.83333333333333337,0,0,0,0,0.53333333333333333,0.2,0,0,0]
[null,null,null,null,null,null,null,null,null,null,null,null,4,"PSAP",0,0.125,0,0.33333333333333331,0.75,0.15384615384615385,0,1,0.5,0,1,0.5,0.33333333333333331,0.3,0,0.25,0]
[null,null,null,null,null,null,null,null,null,null,null,null,2,"PSN - ITHC",0.14285714285714285,0.125,0.25,0,0.25,0.23076923076923078,0,0.83333333333333337,0,0,1,0.5,0.33333333333333331,0.4,1,0.75,0]
[null,null,null,null,null,null,null,null,null,null,null,null,3,"PCI-DSS",0,0.125,0,0.33333333333333331,0.75,0.15384615384615385,0,1,0.5,0,1,0.5,0.33333333333333331,0.3,0,0.25,0]
[null,null,null,null,null,null,null,null,null,null,null,null,5,"10 Steps",0.42857142857142855,1,0,0.66666666666666663,0.25,0.38461538461538464,0,0.66666666666666663,0.75,0,0,0.5,0.8666666666666667,0.9,0.5,1,0.16666666666666666]
[null,null,null,null,null,null,null,null,null,null,null,null,6,"GDPR",0.2857142857142857,1,0.25,0.33333333333333331,1,7.6923076923076927E-2,0,1,0.75,0,0,0.75,0.8666666666666667,0.9,0.5,1,0.66666666666666663]
[null,null,null,null,null,null,null,null,null,null,null,null,7,"HMG SPF",0.2857142857142857,1,0.5,0.66666666666666663,0.75,7.6923076923076927E-2,1,1,1,0,0,0.5,0.53333333333333333,0.5,1,1,1]
[null,null,null,null,null,null,null,null,null,null,null,null,8,"ISO 27001",0.2857142857142857,0.625,0.5,1,0.75,0.61538461538461542,1,1,0.75,1,1,1,0.46666666666666667,0.2,1,1,0.83333333333333337]
[null,null,null,null,null,null,null,null,null,null,null,null,9,"NIS - CAF",0.8571428571428571,1,0.75,1,1,0.61538461538461542,1,0.83333333333333337,1,0.5,0,1,0.4,0.8,1,1,1]

{"sheet":"Colour-Lookup","index":10,"n_rows":100,"n_cols":57,"rows_kept":100,"cut":false,"hidden":true,"merged":[[88,0,99,0],[6,39,6,44],[6,45,6,50],[6,51,6,56],[7,0,26,0],[27,0,84,0],[85,0,87,0],[6,3,6,8],[6,9,6,14],[6,15,6,20],[6,21,6,26],[6,27,6,32],[6,33,6,38]]}
[]
[]
[]
[]
[]
[null,null,null,2,null,null,null,null,null,2,null,null,null,null,null,4,null,null,"*",null,null,4,null,null,null,null,null,4,null,null,"*",null,null,4,null,null,null,null,null,4,null,null,null,null,null,6,null,null,null,null,"*",6]
[null,null,null,"CE",null,null,null,null,null,"PSAP",null,null,null,null,null,"PSN - ITHC",null,null,null,null,null,"PCI-DSS",null,null,null,null,null,"10 Steps",null,null,null,null,null,"GDPR",null,null,null,null,null,"HMG SPF",null,null,null,null,null,"ISO 27001",null,null,null,null,null,"NIS - CAF"]
["MANAGE",{"$error":"#VALUE!"},null,0,1,2,3,4,5,0,1,2,3,4,5,0,1,2,3,4,5,0,1,2,3,4,5,0,1,2,3,4,5,0,1,2,3,4,5,0,1,2,3,4,5,0,1,2,3,4,5,0,1,2,3,4,5]
[null,"Governance framework",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Leadership & responsibility",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Adoption of assurance standards",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Information Asset Register",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Audit/assurance compliance",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"RISK MANAGEMENT"]
[null,"Risk management policy & process",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Cyber / Information Risk Assessment",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Risk treatment & tolerance",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Risk governance",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"SUPPLIER MANAGEMENT"]
[null,"Supply chain security assurance & management"]
[null,"Roles & responsibilities defined"]
[null,"Access control"]
[null,"Security in system procurements"]
[null,"ASSET MANAGEMENT"]
[null,"Hardware assets register & management"]
[null,"Software assets register & management"]
[null,"Infrastructure management"]
["PROTECT","INFORMATION SECURITY MANAGEMENT"]
[null,"Security policy & processes"]
[null,"Lifecycle management"]
[null,"Storage"]
[null,"Information/data classification"]
[null,"Information assets register"]
[null,"Information/data transfer controls"]
[null,"PEOPLE"]
[null,"Prior to employment"]
[null,"During employment"]
[null,"Staff training & awareness culture",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Staff skills assessment"]
[null,"Mobile/remote working policy"]
[null,"SERVICES RESILIENCE"]
[null,"Services Resilience"]
[null,"ACCESS CONTROL"]
[null,"Account management",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Identity authentication",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Privilege management",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Administrator account management",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"MEDIA MANAGEMENT"]
[null,"Storage media management"]
[null,"Mobile media/devices"]
[null,"Cryptography"]
[null,"Remote wipe capability"]
[null,"ENVIRONMENTAL SECURITY"]
[null,"Equipment location"]
[null,"Power resilience"]
[null,"PHYSICAL/BUILDING SECURITY"]
[null,"Access control"]
[null,"Internal security"]
[null,"SYSTEM MANAGEMENT"]
[null,"Secure configuration  ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Secure design/development"]
[null,"Change control procedures"]
[null,"System Testing"]
[null,"OPERATIONAL SECURITY"]
[null,"Malware policies & protection",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Email security",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Application security",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Vulnerability management & scanning",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Data exfiltration monitoring"]
[null,"Software supported & updated",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Web site screening",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Browser management"]
[null,"Monitor/audit user activity"]
[null,"Disabled auto-run",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"NETWORK SECURITY"]
[null,"Patch management",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Device management"]
[null,"Content screening"]
[null,"Internal segregation"]
[null,"Wireless security",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Boundary/Firewall management",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
[null,"Administrator control"]
[null,"Error message management"]
[null,"Penetration testing"]
[null,"IP & DNS management",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   "]
["DETECT","INCIDENT DETECTION"]
[null,"Detection capability"]
[null,"Security Monitoring"]
["RESPOND & RECOVER","INCIDENT MANAGEMENT"]
[null,"Incident response protocol",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Incident reporting procedure",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"Staff training & testing"]
[null,"Post-incident review & learning",null,null,null,null,null,null,null,"                       ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"   ",null,null,null,null,null,"   ",null,null,null,null,null,"   "]
[null,"BUSINESS CONTINUITY"]
[null,"Data recover capability"]
[null,"Back up policies & procedures"]
[null,"Disaster recovery policies & procedures"]
[null,"BC/DR testing policies & procedures"]
[null,"Data Loss impact assessments"]
[null,"BC contingency plan"]

{"sheet":"Breakdown","index":11,"n_rows":106,"n_cols":77,"rows_kept":106,"cut":false,"hidden":true,"merged":[[101,11,101,14],[5,53,5,56],[89,0,99,0],[101,0,102,0],[85,0,87,0],[27,0,28,0],[7,0,10,0],[4,26,5,26],[4,15,5,15],[4,16,5,16],[4,17,5,17],[4,18,5,18],[4,19,5,19],[4,20,5,20],[5,35,5,39],[5,61,5,63],[5,64,5,66],[6,16,6,19],[6,20,6,22],[6,24,6,25],[5,28,5,33],[5,40,5,44],[5,45,5,48],[5,49,5,52],[5,57,5,60],[4,21,5,21],[4,22,5,22],[4,23,5,23],[4,24,5,24],[4,25,5,25]]}
[]
[]
[]
[]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"0/1","No of Sub cat Requirements for THIS STAGE 100% ","% contribution of subcat to TARGET Stage","% contribution of subcat to ADVANCED Stage","0/1","No of Sub cat Requirements for THIS STAGE 100% ","% contribution of subcat to ADVANCED Stage","Cumulative Score - Baseline + Target","0/1","No of Sub cat Requirements for THIS STAGE 100% ","Cumulative Score - Baseline + Target + Adv",null,"STANDARDS & STAGES (contribution / impact scores)",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"%progress on Partial Baseline","%progress on full Baseline"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"CE",null,null,null,null,null,null,"PSAP",null,null,null,null,"PSN - ITHC",null,null,null,null,"PCI-DSS",null,null,null,"10 Steps",null,null,null,"GDPR",null,null,null,"HMG SPF",null,null,null,"ISO 27001",null,null,"NIS - CAF",null,null,null,null,null,"No of Sub cat Requirements for THIS STAGE 100% ","%progress on Partial Baeline","%progress on %full Baseline","%progress on Partial target","%progress on %full target"]
[null,"Category/Sub Category","CE","PSAP","PSN","PCI","10 Steps","GDPR","HMG SPF","ISO 27001","NIS ","CRF Baseline","CRF Target","CRF Advanced","CRF 100%","S =100%","Baseline",null,null,null,"Target",null,null,"S","Advanced",null,"S",null,"Sub cat requirements","Standard sub cats total","% of standard","% of Baseline","% of Target","% of Advanced","Sub cat requirements","Standard sub cats total","% of standard","% of Baseline","% of Target","% of Advanced","Sub cat requirements","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Advanced","Standard sub cats total","% of standard","% of Advanced"]
["MANAGE","ORGANISATIONAL GOVERNANCE",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Advanced"]
[null,"Governance framework",null,2,null,null,1.1000000000000001,"A1","1a","5.1a, 5.1f","A1.a",1,1,1,1,8,1,1,{"$f":"R9/(R9+V9)","v":0.16666666666666666},{"$f":"R9/P9","v":0.125},1,5,{"$f":"(V9+R9)/P9","v":0.75},{"$f":"(V9+R9)/P9","v":0.75},1,2,{"$f":"(R9+V9+Z9)/P9","v":1},null,{"$f":"R9","v":1},null,null,null,null,null,{"$f":"R9","v":1},30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,8.3333333333333329E-2,0.16666666666666666,2,6.25E-2,0.125,0.375,0.75,{"$f":"IF(BW9=1,1,1-(1-BW9)/2)","v":0.875},1]
[null,"Leadership & responsibility",null,2,null,null,null,null,"1a","5.1a ","A1.b",1,1,1,1,10,1,4,{"$f":"R10/(R10+V10)","v":0.66666666666666663},{"$f":"R10/P10","v":0.4},1,2,{"$f":"(V10+R10)/P10","v":0.6},{"$f":"(V10+R10)/P10","v":0.6},1,4,{"$f":"(R10+V10+Z10)/P10","v":1},null,{"$f":"R10","v":4},null,null,null,null,null,{"$f":"R10","v":4},30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.33333333333333331,0.66666666666666663,4,0.2,0.4,0.3,0.6,{"$f":"IF(BW10=1,1,1-(1-BW10)/2)","v":0.8},1]
[null,"Adoption of assurance standards",null,4,null,null,1.6,null,null,"5.1, 5.2","A2.b",1,1,1,1,5,1,1,{"$f":"R11/(R11+V11)","v":0.5},{"$f":"R11/P11","v":0.2},1,1,{"$f":"(V11+R11)/P11","v":0.4},{"$f":"(V11+R11)/P11","v":0.4},1,3,{"$f":"(R11+V11+Z11)/P11","v":1},null,{"$f":"R11","v":1},null,null,null,null,null,{"$f":"R11","v":1},30,{"$f":"1/30","v":3.3333333333333333E-2},3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.25,0.5,3,0.1,0.2,0.2,0.4,0.7,1]
[null,"Information Asset Register",null,2,null,null,null,"A3","2a","A8.1.1 A8.1.2",null,1,1,1,1,6,1,2,{"$f":"R12/(R12+V12)","v":0.66666666666666663},{"$f":"R12/P12","v":0.33333333333333331},1,1,{"$f":"(V12+R12)/P12","v":0.5},0.5,1,3,{"$f":"(R12+V12+Z12)/P12","v":1},null,2,null,null,null,null,null,{"$f":"R12","v":2},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,0.33333333333333331,0.66666666666666663,3,0.16666666666666666,0.33333333333333331,0.25,0.5,0.75,1]
[null,"Audit/assurance compliance",null,4,7,null,null,null,"1d","A12.7.1 A18.2.1 A18.2.2 A18.2.2","A2.b",1,1,1,1,5,1,1,{"$f":"R13/(R13+V13)","v":0.5},{"$f":"R13/P13","v":0.2},1,1,{"$f":"(V13+R13)/P13","v":0.4},0.4,1,3,{"$f":"(R13+V13+Z13)/P13","v":1},null,1,null,null,null,null,null,{"$f":"R13","v":1},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},{"$f":"V13","v":1},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.25,0.5,3,0.1,0.2,0.2,0.4,0.7,1]
[null," RISK MANAGEMENT"]
[null,"Risk management policy & process",null,2,null,null,1.4,"A1","1c","6.1.2","A1.b; 1.c; A2.a; B1.a",1,1,1,1,8,1,1,{"$f":"R15/(R15+V15)","v":0.33333333333333331},{"$f":"R15/P15","v":0.125},1,2,{"$f":"(V15+R15)/P15","v":0.375},0.375,1,5,{"$f":"(R15+V15+Z15)/P15","v":1},null,1,null,null,null,null,null,{"$f":"R15","v":1},30,{"$f":"1/30","v":3.3333333333333333E-2},3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.16666666666666666,0.33333333333333331,5,6.25E-2,0.125,0.1875,0.375,0.6875,1]
[null,"Cyber / Information Risk Assessment",null,2,4,"6, 12","1.2; 10.1","A2","1c; 2e","6.1.2","A1.c; A2.a; B1.a",1,1,1,1,7,1,1,{"$f":"R16/(R16+V16)","v":0.25},{"$f":"R16/P16","v":0.14285714285714285},1,3,{"$f":"(V16+R16)/P16","v":0.5714285714285714},0.5714285714285714,1,3,{"$f":"(R16+V16+Z16)/P16","v":1},null,1,null,null,null,null,null,{"$f":"R16","v":1},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},{"$f":"V16","v":3},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.125,0.25,3,7.1428571428571425E-2,0.14285714285714285,0.2857142857142857,0.5714285714285714,0.7857142857142857,1]
[null,"Risk treatment & tolerance",null,2,null,null,1.2,"A2","1c","6.1.3","A1.c",1,1,1,1,7,1,1,{"$f":"R17/(R17+V17)","v":0.33333333333333331},{"$f":"R17/P17","v":0.14285714285714285},1,2,{"$f":"(V17+R17)/P17","v":0.42857142857142855},0.42857142857142855,1,4,{"$f":"(R17+V17+Z17)/P17","v":1},null,1,null,null,null,null,null,{"$f":"R17","v":1},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.16666666666666666,0.33333333333333331,4,7.1428571428571425E-2,0.14285714285714285,0.21428571428571427,0.42857142857142855,0.7142857142857143,1]
[null,"Risk governance",null,2,null,null,1.1000000000000001,"A2",null,"6.1.3","A1.c",1,1,1,1,9,1,3,{"$f":"R18/(R18+V18)","v":0.42857142857142855},{"$f":"R18/P18","v":0.33333333333333331},1,4,{"$f":"(V18+R18)/P18","v":0.77777777777777779},0.77777777777777779,1,2,{"$f":"(R18+V18+Z18)/P18","v":1},null,3,null,null,null,null,null,{"$f":"R18","v":3},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.21428571428571427,0.42857142857142855,2,0.16666666666666666,0.33333333333333331,0.3888888888888889,0.77777777777777779,0.88888888888888884,1]
[null,"SUPPLIER MANAGEMENT"]
[null,"Supply chain security assurance & management",null,8,5,null,null,"A4","1d","A13.2.2 A13.2.4 A15.1 A15.2","A4.a; B2.b",1,1,1,1,5,0,null,{"$f":"R20/(R20+V20)","v":0},{"$f":"R20/P20","v":0},1,5,{"$f":"(V20+R20)/P20","v":1},1,1,0,{"$f":"(R20+V20+Z20)/P20","v":1},null,null,null,null,null,null,null,null,null,null,null,null,null,5,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,0,0,0,0.5,1,1,1]
[null,"Roles & responsibilities defined",null,null,null,null,null,null,"6a.6",null,"A4.a",null,1,1,1,3,0,null,0,0,1,2,0.66666666666666663,0.66666666666666663,1,1,{"$f":"(R21+V21+Z21)/P21","v":1},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,1,0,0,0.33333333333333331,0.66666666666666663,0.83333333333333326,1]
[null,"Access control",null,null,null,null,null,null,null,null,"A4.a; B2.b",null,1,1,1,6,0,null,null,0,null,null,0,0,1,6,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,6,0,0,0,0,0.5,1]
[null,"Security in system procurements",null,null,null,null,null,null,null,"A14.1.1","A4.a",null,1,1,1,2,0,null,0,0,1,1,0.5,0.5,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,1,0,0,0.25,0.5,0.75,1]
[null,"ASSET MANAGEMENT",null,null,null,null,null,null,null,"A8.1"]
[null,"Hardware assets register & management",null,null,null,12,2.2999999999999998,"B4","2d; 6a.1; 6b.1","A8.1.1 A8.1.2 A8.1.3 A8.1.4 A11.2.5 A11.2.6 A11.2.7","A3.a",null,1,1,1,10,0,null,0,0,1,3,0.3,0.3,1,7,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,7,0,0,0.15,0.3,0.65,1]
[null,"Software assets register & management",2,4,null,null,2.2999999999999998,null,"6a.1","A8.1.1 A8.1.2 A8.1.3 A8.1.4 A12.6.2","A3.a",1,1,1,1,5,1,2,0.5,0.4,1,2,0.8,0.8,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.25,0.5,1,0.2,0.4,0.4,0.8,0.9,1]
[null,"Infrastructure management",null,null,null,null,null,null,null,"A11.2.1 A11.2.2 A11.2.3 A11.2.4","A3.a",null,1,1,1,5,0,null,0,0,1,1,0.2,0.2,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,4,0,0,0.1,0.2,0.6,1]
["PROTECT","INFORMATION SECURITY MANAGEMENT"]
[null,"Security policy & processes",null,null,"1a","12.2,  12.3",null,"A1; B1","1b","A5.1 A9.1.1  A12.1.1","B1.a",null,1,1,1,7,0,null,0,0,1,5,0.7142857142857143,0.7142857142857143,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,5,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,2,0,0,0.35714285714285715,0.7142857142857143,0.85714285714285721,1]
[null,"Lifecycle management",null,null,null,"3, 9",9.6,"A3","2b","A8.2.3 A8.3.2","A3.a; B3.a; B3.d",null,1,1,1,9,0,null,0,0,1,8,0.88888888888888884,0.88888888888888884,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,2.7777777777777776E-2,1.4492753623188406E-2,1.3513513513513514E-2,50,0.02,1.4492753623188406E-2,1.3513513513513514E-2,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,1,0,0,0.44444444444444442,0.88888888888888884,0.94444444444444442,1]
[null,"Storage",null,null,null,9,null,null,"2c",null,"B3.a; B3.c",null,1,1,1,5,0,null,0,0,1,1,0.2,0.2,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,36,2.7777777777777776E-2,1.4492753623188406E-2,1.3513513513513514E-2,50,0.02,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,4,0,0,0.1,0.2,0.6,1]
[null,"Information/data classification",null,null,null,null,null,"A2","2a","A8.2.1 A8.2.2 A8.2.3","B3.a",null,1,1,1,4,0,null,0,0,1,1,0.25,0.25,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,2.7777777777777776E-2,1.4492753623188406E-2,1.3513513513513514E-2,50,0.02,1.4492753623188406E-2,1.3513513513513514E-2,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,3,0,0,0.125,0.25,0.625,1]
[null,"Information assets register",null,null,null,null,null,"A3","2a","A8.2.1 A8.2.3","A3.a; B3.a",null,1,1,1,5,0,null,0,0,1,3,0.6,0.6,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,2.7777777777777776E-2,1.4492753623188406E-2,1.3513513513513514E-2,50,0.02,1.4492753623188406E-2,1.3513513513513514E-2,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,2,0,0,0.3,0.6,0.8,1]
[null,"Information/data transfer controls",null,null,4,4,"10.4; 10.5","B2; B3","2d; 6d","A8.3.3 A13.2.1 A14.1.3","A4.a; B3.a; B3.b",null,1,1,1,12,0,null,0,0,1,8,0.66666666666666663,0.66666666666666663,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,8,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,2.7777777777777776E-2,1.4492753623188406E-2,1.3513513513513514E-2,50,0.02,1.4492753623188406E-2,1.3513513513513514E-2,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,4,0,0,0.33333333333333331,0.66666666666666663,0.83333333333333326,1]
[null,"PEOPLE"]
[null,"Prior to employment",null,null,null,null,null,null,null,"A7.1",null,null,1,1,1,3,0,null,0,0,1,1,0.33333333333333331,0.33333333333333331,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,1,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,0,0,2,0,0,0.16666666666666666,0.33333333333333331,0.66666666666666663,1]
[null,"During employment",null,null,null,null,null,null,null,"A7.2",null,null,1,1,1,7,0,null,0,0,1,5,0.7142857142857143,0.7142857142857143,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,5,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,2,0,0,0.35714285714285715,0.7142857142857143,0.85714285714285721,1]
[null,"Staff training & awareness culture",null,6,null,12,"4.7; 5.3; 5.5; 9.7; 10.2","B5","1e","A7.2.2","A1.b; B1.a; B6.a; B6.c; C1.e",1,1,1,1,8,1,1,0.16666666666666666,0.125,1,5,0.75,0.75,1,2,1,null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,8.3333333333333329E-2,0.16666666666666666,2,6.25E-2,0.125,0.375,0.75,0.875,1]
[null,"Staff skills assessment",null,null,null,null,5.4,null,null,null,null,null,1,null,1,3,0,null,0,0,1,2,0.66666666666666663,0.66666666666666663,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,1,0,0,0.33333333333333331,0.66666666666666663,0.83333333333333326,1]
[null,"Mobile/remote working policy",null,null,3,null,null,null,null,"A6.2.1 A6.2.2 A14.1.2.","B3.d",null,1,1,1,10,0,null,0,0,1,6,0.6,0.6,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,6,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,4,0,0,0.3,0.6,0.8,1]
[null,"SERVICES RESILIENCE",null,null,null,null,null,null,"3a,b,c","A17.2.1","B5.b",null,1,1,1,6,0,null,{"$f":"R41/(R41+V41)","v":0},{"$f":"R41/P41","v":0},1,1,{"$f":"(V41+R41)/P41","v":0.16666666666666666},{"$f":"(V41+R41)/P41","v":0.16666666666666666},1,5,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2}]
[null,"Services Resilience",null,null,null,null,null,null,"3a,b,c","A17.2.1","B5.b",null,1,1,1,6,0,null,0,0,1,1,0.16666666666666666,0.16666666666666666,1,5,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,5,0,0,8.3333333333333329E-2,0.16666666666666666,0.58333333333333326,1]
[null,"ACCESS CONTROL",3,4,null,null,null,"B2",null,"A9.1","B3.a",null,null,null,null,null,null,null,null,null,1,null,null,null,1]
[null,"Account management","2, 3",4,2,7,4.0999999999999996,null,"4b","A9.1.2 A9.2 A9.4.1 A12.6.2","B2.a; B2.c",1,1,1,1,10,1,6,0.6,0.6,1,4,1,1,1,0,{"$f":"(R44+V44+Z44)/P44","v":1},null,{"$f":"SUM(AF44:AH44)","v":6.3720552850987627E-2},15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.3,0.6,0,0.3,0.6,0.5,1,1,1]
[null,"Identity authentication",3,4,2,8,4.2,"B2","5b","A9.4.1","B2.a; B2.d",1,1,1,1,9,1,2,0.33333333333333331,0.22222222222222221,1,4,0.66666666666666663,0.66666666666666663,1,3,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.16666666666666666,0.33333333333333331,3,0.1111111111111111,0.22222222222222221,0.33333333333333331,0.66666666666666663,0.83333333333333326,1]
[null,"Privilege management",3,4,"2; 5",7,"4.1; 4.3","B2","4a; 5a,b","A9.1.2A9.2.3 A9.4.4","B2.a; B2.c; B4.c; C1.b",1,1,1,1,9,1,3,0.6,0.33333333333333331,1,2,0.55555555555555558,0.55555555555555558,1,4,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},2,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.3,0.6,4,0.16666666666666666,0.33333333333333331,0.27777777777777779,0.55555555555555558,0.77777777777777779,1]
[null,"Administrator account management",3,4,5,7,"4.4; 4.6","B2","5a","A9.1.2 A9.2.3 A9.4.4 A9.4.5 ","B2.a; B4.c",1,1,1,1,5,1,2,0.5,0.4,1,2,0.8,0.8,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},2,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.25,0.5,1,0.2,0.4,0.4,0.8,0.9,1]
[null,"MEDIA MANAGEMENT",null,null,null,null,null,null,null,"A8.1"]
[null,"Storage media management",null,null,null,9,"9.2; 9.3; 9.4; 9.5","B4","6b.1","A8.1.1 A8.1.2 A8.1.3 A8.1.4 A8.3.2","B3.d B3.e",null,1,1,1,12,0,null,0,0,1,10,0.83333333333333337,0.83333333333333337,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,2,0,0,0.41666666666666669,0.83333333333333337,0.91666666666666674,1]
[null,"Mobile media/devices",null,null,null,null,"2.7; 9.2; 9.5; 9.6","B3","6b.1; 6b.4","A6.2 A8.1.1 A8.1.2 A8.3.1","B3.a; B3.d B3.e",null,1,1,1,null,null,null,null,null,1,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,0,0,0,0,0,0,0,0.5,1]
[null,"Cryptography",null,null,null,"3, 4",9.5,"B4","6b.4","A10.1 A18.1.5","B3.b; B3.c",null,1,1,1,8,0,null,0,0,1,7,0.875,0.875,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,1,0,0,0.4375,0.875,0.9375,1]
[null,"Remote wipe capability",null,null,null,null,null,null,"6b.5",null,"B3.d",null,1,1,1,1,0,null,0,0,1,1,1,1,1,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,0,0,0,0.5,1,1,1]
[null,"ENVIRONMENTAL SECURITY"]
[null,"Equipment location",null,null,null,null,null,null,null,"A11.1.4 A11.2.1",null,null,null,1,1,2,0,null,null,0,null,null,0,{"$f":"(V54+R54)/P54","v":0},1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,2,0,0,0,0,0.5,1]
[null,"Power resilience",null,null,null,null,null,null,null,"A11.2.2","A3a",null,null,1,1,2,0,null,null,0,null,null,0,0,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,2,0,0,0,0,0.5,1]
[null,"PHYSICAL/BUILDING SECURITY"]
[null,"Access control",null,null,"1c",9,null,null,null,"A11.1 A11.1.2",null,null,1,1,1,8,0,null,0,0,1,7,0.875,0.875,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,7,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,0,0,1,0,0,0.4375,0.875,0.9375,1]
[null,"Internal security",null,null,"1c",9,null,null,null,"A11.1 A11.1.3 A11.1.6",null,null,1,1,1,4,0,null,0,0,1,2,0.5,0.5,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,2,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,0,0,2,0,0,0.25,0.5,0.75,1]
[null,"SYSTEM MANAGEMENT"]
[null,"Secure configuration  ",2,4,"1b",null,"2.4; 10.3","B4","6a.2; 6d.2","A12.4.4 A12.5.1","B4.b",1,1,1,1,14,1,5,0.45454545454545453,0.35714285714285715,1,6,0.7857142857142857,0.7857142857142857,1,3,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},6,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.22727272727272727,0.45454545454545453,3,0.17857142857142858,0.35714285714285715,0.39285714285714285,0.7857142857142857,0.89285714285714279,1]
[null,"Secure design/development",null,null,null,6,null,null,null,"A12.1.3 A14.2.1 A14.2.3 A14.2.5 A14.2.6 A14.2.7 A14.2.8","B4.a",null,1,1,1,11,0,null,0,0,1,5,0.45454545454545453,0.45454545454545453,1,6,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,6,0,0,0.22727272727272727,0.45454545454545453,0.72727272727272729,1]
[null,"Change control procedures",null,null,null,null,"2.6; 2.9","B4",null,"A12.1.2 A14.2.2 A14.2.4","B4.b",null,1,1,1,5,0,null,0,0,1,2,0.4,0.4,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,3,0,0,0.2,0.4,0.7,1]
[null,"System Testing",null,null,7,11,null,"B4","6a.3; 6d.4","A.2.1.3 A14.2.3 A14.2.8 A14.2.9 A14.3.1","B4.d",null,1,1,1,12,0,null,0,0,1,9,0.75,0.75,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,9,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,3,0,0,0.375,0.75,0.875,1]
[null,"OPERATIONAL SECURITY",null,null,null,null,null,"B4; C1"]
[null,"Malware policies & protection",4,4,"1b",5,"5.1; 7.1",null,"1b","A12.2.1","B4.c",1,1,1,1,4,1,1,0.25,0.25,1,3,1,1,1,0,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},3,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.125,0.25,0,0.125,0.25,0.5,1,1,1]
[null,"Email security",null,5,null,null,null,null,"6c.1; 6c.2","A13.2.3",null,1,1,1,1,4,1,1,{"$f":"R66/(R66+V66)","v":0.25},{"$f":"R66/P66","v":0.25},1,3,{"$f":"(V66+R66)/P66","v":1},1,1,0,1,null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,0.125,0.25,0,0.125,0.25,0.5,1,1,1]
[null,"Application security",null," 5",null,null,null,null,"6d.1",null,null,1,1,null,1,2,1,1,0.5,0.5,1,1,1,1,null,null,1,null,null,null,null,null,null,null,null,30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,0.25,0.5,0,0.25,0.5,0.5,1,1,1]
[null,"Vulnerability management & scanning",null,5,"1a","5, 6, 1911",2.5,null,null,"A12.6.1","A2.b; B2.b; B4.a; B4.d",1,1,1,1,12,1,1,0.1111111111111111,8.3333333333333329E-2,1,8,0.75,0.75,1,3,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},8,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,5.5555555555555552E-2,0.1111111111111111,3,4.1666666666666664E-2,8.3333333333333329E-2,0.375,0.75,0.875,1]
[null,"Data exfiltration monitoring",null,null,null,null,7.2,null,null,null,"C1.a",null,1,1,1,2,0,null,0,0,1,2,1,1,1,0,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,0,0,0,0.5,1,1,1]
[null,"Software supported & updated","4, 5","4, 5",null,5,2.1,"B4","6b.3",null,"B4.d",1,1,1,1,4,1,1,0.33333333333333331,0.25,1,2,0.75,0.75,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.16666666666666666,0.33333333333333331,1,0.125,0.25,0.375,0.75,0.875,1]
[null,"Web site screening",4,4,null,null,7.3,null,null,null,null,1,1,null,1,1,1,1,1,1,1,0,1,1,null,null,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0.5,1,0,0.5,1,0.5,1,1,1]
[null,"Browser management",null,null,null,null,"7.6.4",null,null,null,null,null,1,null,1,3,0,null,0,0,1,3,1,1,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,0,0,0,0.5,1,1,1]
[null,"Monitor/audit user activity",null,null,null,10,"4.5; 8.4","B2; C1",null,"A12.4.1 A12.4.3","B2.c; B2.d; C1.a",null,1,1,1,15,0,null,0,0,1,12,0.8,0.8,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,3,0,0,0.4,0.8,0.9,1]
[null,"Disabled auto-run",2,2,null,null,"7.6.5",null,null,null,null,1,1,null,1,1,1,1,1,1,1,null,1,1,null,null,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0.5,1,null,0.5,1,0.5,1,{"$f":"IF(BW74=1,1,1-(1-BW74)/2)","v":1},1]
[null,"NETWORK SECURITY",null,null,null,null,null,"B4",null,"A13.1",null,null,null,null,null,null,null,null,null,null,1,null,null,null,1]
[null,"Patch management",5,4,"1a",6,2.2000000000000002,"B4","6a.2; 6b.3",null,"B4.d",1,1,1,1,5,1,1,0.2,0.2,1,4,1,1,1,0,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.1,0.2,0,0.1,0.2,0.5,1,{"$f":"IF(BW76=1,1,1-(1-BW76)/2)","v":1},1]
[null,"Device management",null,null,3,null,"2.7; 7.5; 7.6.6 10.3","B4","5b; 6b.2; 6b.4",null,"B2.b; B2.c; B4.c",null,1,1,1,9,0,null,0,0,1,5,0.55555555555555558,0.55555555555555558,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,4,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,4,0,0,0.27777777777777779,0.55555555555555558,0.77777777777777779,1]
[null,"Content screening",null,null,null,null,"3.1.2; 7.2; 7.4; 7.5.3",null,null,null,"B4.a",null,1,1,1,2,0,null,0,0,1,2,1,1,1,0,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,null,null,null,null,null,null,null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,0,0,0,0.5,1,1,1]
[null,"Internal segregation",null,null,null,null,"3.2.1",null,null,"A.12.1.3 A13.1.3","B4.a; B5.b",null,1,1,1,5,0,null,0,0,1,2,0.4,0.4,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,3,0,0,0.2,0.4,0.7,1]
[null,"Wireless security",2,2,null,null,"3.2.3",null,null,null,null,1,1,null,1,4,1,1,0.25,0.25,1,3,1,1,null,null,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0.125,0.25,null,0.125,0.25,0.5,1,1,1]
[null,"Boundary/Firewall management",1,4,3,"1, 6","3.1.17.6.3",null,null,null,"B4.a",1,1,1,1,14,1,6,0.46153846153846156,0.42857142857142855,1,7,0.9285714285714286,0.9285714285714286,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},7,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,null,null,null,null,null,null,null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.23076923076923078,0.46153846153846156,1,0.21428571428571427,0.42857142857142855,0.4642857142857143,0.9285714285714286,0.9642857142857143,1]
[null,"Administrator control",null,null,null,null,"3.2.4",null,"6a.5","A.12.4.3","B2.c",null,1,1,1,4,0,null,0,0,1,3,0.75,0.75,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,1,0,0,0.375,0.75,0.875,1]
[null,"Error message management",null,null,null,null,"3.2.5",null,null,null,null,null,1,null,1,1,0,null,0,0,1,1,1,1,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,0,0,0,0.5,1,1,1]
[null,"Penetration testing",null,null,7,11,"3.2.6",null,"6a.3","A.14.2.9","B4.d",null,1,1,1,4,0,null,0,0,1,4,1,1,1,0,1,null,null,null,null,null,null,null,null,null,null,null,null,null,4,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,2.1739130434782608E-2,1.4492753623188406E-2,1.3513513513513514E-2,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,0,0,0,0.5,1,1,1]
[null,"IP & DNS management",null,null,null,null,null,null,"6a.4; 6a.6",null,"C1.a",null,1,1,1,4,1,1,0.33333333333333331,0.25,1,2,0.75,0.75,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.16666666666666666,0.33333333333333331,1,0.125,0.25,0.375,0.75,0.875,1]
["DETECT ","INCIDENT DETECTION"]
[null,"Detection capability",null,null,"1d",null,null,null,"8d","A12.2.1","B2.d; B4.c C1.a; C1.c; C1.d; C2.a; C2.b",null,1,1,1,11,0,null,0,0,1,4,0.36363636363636365,0.36363636363636365,1,7,1,null,null,null,null,null,null,null,null,null,null,null,null,null,4,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/91","v":1.098901098901099E-2},null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,7,0,0,0.18181818181818182,0.36363636363636365,{"$f":"IF(BW87=1,1,1-(1-BW87)/2)","v":0.68181818181818188},1]
[null,"Security Monitoring",null,null,"1d",null,"3.2.58.1","C1","8b","A12.4","C1.a; C1.e",null,1,1,1,12,0,null,0,0,1,9,0.75,0.75,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,9,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,3,0,0,0.375,0.75,0.875,1]
[null,"INCIDENT MANAGEMENT"]
["RESPOND & RECOVER","Incident response protocol",null,7,"1d; 1e",12,"6.1; 6.3; 6.5; 8.8; 10.6","C1","8a; 9a","A12.2.1 A16.1.1 A16.1.4 A16.1.5","D1.a",1,1,1,1,13,1,1,0.1,7.6923076923076927E-2,1,9,0.76923076923076927,0.76923076923076927,1,3,{"$f":"(R90+V90+Z90)/P90","v":1},null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},3,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.05,0.1,3,3.8461538461538464E-2,7.6923076923076927E-2,0.38461538461538464,0.76923076923076927,{"$f":"IF(BW90=1,1,1-(1-BW90)/2)","v":0.88461538461538458},1]
[null,"Incident reporting procedure",null,7,"1d; 1e",null,"5.6; 6.6; 6.9; 6.10","C1, D2","9a; 9b; 9c","A12.4 A16.1.2 A16.1.3","B6.a; D1.a",1,1,1,1,5,1,1,0.2,0.2,1,4,1,1,1,0,1,null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.1,0.2,0,0.1,0.2,0.5,1,1,1]
[null,"Staff training & testing",null,null,null,null,"5.2; 5.3","D1","9a; 9d","A7.2.2 A12.2.1","B6.a; B6b; B6.c",null,1,1,1,6,0,null,0,0,1,6,1,1,1,0,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,0,0,0,0.5,1,1,1]
[null,"Post-incident review & learning",null,3,"1.e",null,"6.7; 6.8; 8.9","D2","9d; 9e; 9f; 10c","A16.1.6 A16.1.7","D2.a; D2.b",1,1,1,1,8,1,1,0.2,0.125,1,4,0.625,0.625,1,3,1,null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,{"$f":"1/27","v":3.7037037037037035E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0.1,0.2,3,6.25E-2,0.125,0.3125,0.625,0.8125,1]
[null,"BUSINESS CONTINUITY ",null,null,null,null,null,"D1"]
[null,"Data recover capability",null,null,null,null,6.4,"D1",null,"A12.3.1","B3.c; D1.a",null,1,1,1,2,0,null,0,0,1,1,0.5,0.5,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,0,0,1,0,0,0.25,0.5,{"$f":"IF(BW95=1,1,1-(1-BW95)/2)","v":0.75},1]
[null,"Back up policies & procedures",null,null,null,null,null,"D1",null,"A12.3.1","B3.c; B5.c",null,1,1,1,6,0,null,0,0,1,3,0.5,0.5,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,3,0,0,0.25,0.5,0.75,1]
[null,"Disaster recovery policies & procedures",null,null,null,null,null,"D1","10a","A12.3.1 A17.1.1 A17.1.2","B3.c; B5.a; B5.c; D1.b",null,1,1,1,8,0,null,0,0,1,2,0.25,0.25,1,6,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,6,0,0,0.125,0.25,0.625,1]
[null,"BC/DR testing policies & procedures",null,null,null,null,null,"D1","10a; 10b","A12.3.1 A17.1.3","B5.a; B5.c; D1.c",null,1,1,1,8,0,null,0,0,1,2,0.25,0.25,1,6,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,{"$f":"1/36","v":2.7777777777777776E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,6,0,0,0.125,0.25,0.625,1]
[null,"Data Loss impact assessments",null,null,null,null,null,null,"3d",null,"B3.a",null,1,1,1,3,0,null,0,0,1,1,0.33333333333333331,0.33333333333333331,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,2,0,0,0.16666666666666666,0.33333333333333331,0.66666666666666663,1]
[null,"BC contingency plan",null,null,null,null,null,null,"10a","A17.1.1 A17.2.1","A3.a; B3.b; D1.a",null,1,1,1,8,0,null,0,0,1,1,0.125,0.125,1,7,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,1.6129032258064516E-2,1.3513513513513514E-2,null,0,0,7,0,0,6.25E-2,0.125,0.5625,1]
[null,null,null,null,null,null,null,null,null,null,null,{"$f":"SUM(L9:L100)","v":30},{"$f":"SUM(M9:M100)","v":75},{"$f":"SUM(N9:N100)","v":70},{"$f":"SUM(O9:O100)","v":77}]
[null,"SUMMARY","CE","PSAP","PCI","PSN","10 Steps","GDPR","HMG SPF","ISO 27001","NIS ","Stage compliance scores",null,null,null,"S",{"$f":"SUM(Q9:Q100)","v":30},null,null,null,{"$f":"SUM(U9:U100)","v":76},null,null,null,{"$f":"SUM(Y9:Y100)","v":73},null,null,"S",null,null,{"$f":"SUM(AE9:AE100)","v":0.99999999999999989},{"$f":"SUM(AF9:AF100)","v":0.53571428571428559},{"$f":"SUM(AG9:AG100)","v":0.21739130434782614},{"$f":"SUM(AH9:AH100)","v":0.20270270270270271},null,null,{"$f":"SUM(AK9:AK100)","v":0.99999999999999989},{"$f":"SUM(AL9:AL100)","v":0.99999999999999989},{"$f":"SUM(AM9:AM100)","v":0.43478260869565233},{"$f":"SUM(AN9:AN100)","v":0.40540540540540515},null,null,{"$f":"SUM(AQ9:AQ100)","v":0.99999999999999933},{"$f":"SUM(AR9:AR100)","v":0.39130434782608708},{"$f":"SUM(AS9:AS100)","v":0.36234036234036227},null,{"$f":"SUM(AU9:AU100)","v":0.96296296296296235},{"$f":"SUM(AV9:AV100)","v":0.37681159420289867},{"$f":"SUM(AW9:AW100)","v":0.3513513513513512},null,{"$f":"SUM(AY9:AY100)","v":0.99999999999999944},{"$f":"SUM(AZ9:AZ100)","v":0.69565217391304301},{"$f":"SUM(BA9:BA100)","v":0.64864864864864791},null,{"$f":"SUM(BC9:BC100)","v":1.0000000000000002},{"$f":"SUM(BD9:BD100)","v":0.52173913043478271},{"$f":"SUM(BE9:BE100)","v":0.48648648648648607},null,{"$f":"SUM(BG9:BG100)","v":1.0000000000000004},{"$f":"SUM(BH9:BH100)","v":0.72463768115941973},{"$f":"SUM(BI9:BI100)","v":0.67567567567567488},null,{"$f":"SUM(BK9:BK100)","v":1.0172413793103454},{"$f":"SUM(BL9:BL100)","v":0.77027027027026929},null,{"$f":"SUM(BN9:BN100)","v":1.0161290322580638},{"$f":"SUM(BO9:BO100)","v":0.85135135135135021}]
[null,"% of sub-categories included within each framework/standard",0.18,0.39,0.31,0.31,0.57999999999999996,0.6,0.62,0.72,0.8,{"$f":"1*30","v":30},{"$f":"3*74","v":222},{"$f":"5*69","v":345},{"$f":"5*77","v":385}]
[null,"Baseline total sub cats"]
[null,"Target total sub cats"]
[null,"Advanced totla subcats"]

{"sheet":"variables","index":12,"n_rows":31,"n_cols":44,"rows_kept":31,"cut":false,"hidden":true,"merged":[[0,34,0,43],[0,0,0,1],[11,0,11,1],[0,3,0,8],[0,10,0,22],[0,25,0,29],[0,31,0,32]]}
["Column Offsets",null,null,"FRAMEWORK",null,null,null,null,null,null,"CATEGORY",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"STANDARD",null,null,null,null,null,"STYLE",null,null,"SUBCATEGORY"]
["Framework",{"$f":"getObjectCol(A2)","v":4},null,"mIndex","mName","mCategories","mFrameWork","mCategoryCount","mReportTotalRow",null,"mName","SubCategories()","mFrameWorkID","mSubCategoryCount","mCategoryIndex","mFrameworkName","mReportRow","mLookupRow","mLookupEndRow","mReportTotalRow","mReportStartRow","mReportEndRow","mCurrentTotals()",null,null,"name","ptsAvailable","mReportColumn","mLookupColumn","mIndex",null,"fontColour","cellColour",null,"subCategory","CategoryID","Answers()","StandardPCs()","MaximumPoints","mCurrentPC()","mAnswered()","mCategoryName","mCurrentTotals()","mIndex"]
["Category",{"$f":"getObjectCol(A3)","v":11}]
["Standard",{"$f":"getObjectCol(A4)","v":26}]
["Subcategory",{"$f":"getObjectCol(A5)","v":35}]
["Style",{"$f":"getObjectCol(A6)","v":32},null,null,"Harry"]
[]
[]
[]
[]
[]
["Variables"]
["StandardCnt"]
["CategoryCnt"]
["frameworkCnt"]
["SubCategoryCnt"]
["ReportPagesCnt"]
["MaxLength"]
["FrameWorkNames"]
["CategoryNames"]
["SubCategoryNames"]
["SubStandardNames"]
["StandardColumnOffset"]
[]
[]
[]
[]
[]
[]
[null,{"$f":"ISERROR(B31)","v":false}]
[null,{"$f":"IFERROR(mysheetnumber(),-1)","v":13}]

{"sheet":"old breaskdown","index":13,"n_rows":139,"n_cols":63,"rows_kept":139,"cut":false,"hidden":true,"merged":[[7,0,12,0],[33,0,34,0],[110,0,112,0],[114,0,124,0],[126,0,127,0],[5,53,5,56],[5,57,5,59],[5,60,5,62],[6,12,6,15],[6,16,6,18],[6,20,6,21],[5,24,5,29],[5,31,5,35],[5,36,5,40],[5,41,5,44],[5,45,5,48],[5,49,5,52],[4,17,5,17],[4,18,5,18],[4,19,5,19],[4,20,5,20],[4,21,5,21],[4,22,5,22],[4,11,5,11],[4,12,5,12],[4,13,5,13],[4,14,5,14],[4,15,5,15],[4,16,5,16]]}
[]
[]
[]
[]
[null,null,null,null,null,null,null,null,null,null,null,"Total No of requirements per sub cat","0/1","No of Sub cat Requirements for THIS STAGE 100% ","% contribution of subcat to TARGET Stage","% contribution of subcat to ADVANCED Stage","0/1","No of Sub cat Requirements for THIS STAGE 100% ","% contribution of subcat to ADVANCED Stage","Cumulative Score - Baseline + Target","0/1","No of Sub cat Requirements for THIS STAGE 100% ","Cumulative Score - Baseline + Target + Adv",null,"STANDARDS & STAGES (contribution / impact scores)"]
[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"CE",null,null,null,null,null,null,"PSAP",null,null,null,null,"PSN - ITHC",null,null,null,null,"PCI-DSS",null,null,null,"10 Steps",null,null,null,"GDPR",null,null,null,"HMG SPF",null,null,null,"ISO 27001",null,null,"NIS - CAF"]
[null,"Category/Sub Category","CE","PSAP","PSN","PCI","10 Steps","GDPR","HMG SPF","ISO 27001","NIS ","S =100%","Baseline",null,null,null,"Target",null,null,"S","Advanced",null,"S",null,"Sub cat requirements","Standard sub cats total","% of standard","% of Baseline","% of Target","% of Advanced","Sub cat requirements","Standard sub cats total","% of standard","% of Baseline","% of Target","% of Advanced","Sub cat requirements","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Target","% of Advanced","Standard sub cats total","% of standard","% of Advanced","Standard sub cats total","% of standard","% of Advanced"]
["MANAGE","ORGANISATIONAL GOVERNANCE",null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"_xlfn.FORMULATEXT(O9)","v":"=N9/(N9+R9)"},{"$f":"_xlfn.FORMULATEXT(P9)","v":"=N9/L9"},null,null,{"$f":"_xlfn.FORMULATEXT(S9)","v":"=(R9+N9)/L9"},{"$f":"_xlfn.FORMULATEXT(T9)","v":"=(R9+N9)/L9"},null,null,{"$f":"_xlfn.FORMULATEXT(W9)","v":"=(N9+R9+V9)/L9"}]
[null,"Governance framework",null,2,null,null,1.1000000000000001,"A1","1a","5.1a, 5.1f","A1.a",8,1,1,{"$f":"N9/(N9+R9)","v":0.16666666666666666},{"$f":"N9/L9","v":0.125},1,5,{"$f":"(R9+N9)/L9","v":0.75},{"$f":"(R9+N9)/L9","v":0.75},1,2,{"$f":"(N9+R9+V9)/L9","v":1},null,{"$f":"N9","v":1},null,null,null,null,null,{"$f":"N9","v":1},30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Leadership & responsibility",null,2,null,null,null,null,"1a","5.1a ","A1.b",10,1,4,{"$f":"N10/(N10+R10)","v":0.66666666666666663},{"$f":"N10/L10","v":0.4},1,2,{"$f":"(R10+N10)/L10","v":0.6},{"$f":"(R10+N10)/L10","v":0.6},1,4,{"$f":"(N10+R10+V10)/L10","v":1},null,{"$f":"N10","v":4},null,null,null,null,null,{"$f":"N10","v":4},30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"- SMT",null,2,null,null,null,null,null,"5.1f","A1.a"]
[null,"- Board",null,2,null,null,"Intro",null,null,"5.1f","A1.a, A1.c",null,null,null,null,null,1]
[null,"Adoption of assurance standards",null,4,null,null,1.6,null,null,"5.1, 5.2","A2.b",5,1,1,{"$f":"N13/(N13+R13)","v":0.5},{"$f":"N13/L13","v":0.2},1,1,{"$f":"(R13+N13)/L13","v":0.4},{"$f":"(R13+N13)/L13","v":0.4},1,3,{"$f":"(N13+R13+V13)/L13","v":1},null,{"$f":"N13","v":1},null,null,null,null,null,{"$f":"N13","v":1},30,{"$f":"1/30","v":3.3333333333333333E-2},3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,null,null,null,null,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Information Asset Register",null,2,null,null,null,"A3","2a","A8.1.1 A8.1.2",null,6,1,2,{"$f":"N14/(N14+R14)","v":0.66666666666666663},{"$f":"N14/L14","v":0.33333333333333331},1,1,{"$f":"(R14+N14)/L14","v":0.5},0.5,1,3,{"$f":"(N14+R14+V14)/L14","v":1},null,2,null,null,null,null,null,{"$f":"N14","v":2},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Audit/assurance compliance",null,4,7,null,null,null,"1d","A12.7.1 A18.2.1 A18.2.2 A18.2.2","A2.b",5,1,1,{"$f":"N15/(N15+R15)","v":0.5},{"$f":"N15/L15","v":0.2},1,1,{"$f":"(R15+N15)/L15","v":0.4},0.4,1,3,{"$f":"(N15+R15+V15)/L15","v":1},null,1,null,null,null,null,null,{"$f":"N15","v":1},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},{"$f":"R15","v":1},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,null,null,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null," RISK MANAGEMENT"]
[null,"Risk management policy & process",null,2,null,null,1.4,"A1","1c","6.1.2","A1.b; 1.c; A2.a; B1.a",8,1,1,{"$f":"N17/(N17+R17)","v":0.33333333333333331},{"$f":"N17/L17","v":0.125},1,2,{"$f":"(R17+N17)/L17","v":0.375},0.375,1,5,{"$f":"(N17+R17+V17)/L17","v":1},null,1,null,null,null,null,null,{"$f":"N17","v":1},30,{"$f":"1/30","v":3.3333333333333333E-2},3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"Cyber / Information Risk Assessment",null,2,4,"6, 12","1.2; 10.1","A2","1c; 2e","6.1.2","A1.c; A2.a; B1.a",7,1,1,{"$f":"N18/(N18+R18)","v":0.25},{"$f":"N18/L18","v":0.14285714285714285},1,3,{"$f":"(R18+N18)/L18","v":0.5714285714285714},0.5714285714285714,1,3,{"$f":"(N18+R18+V18)/L18","v":1},null,1,null,null,null,null,null,{"$f":"N18","v":1},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},{"$f":"R18","v":3},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Risk treatment & tolerance",null,2,null,null,1.2,"A2","1c","6.1.3","A1.c",7,1,1,{"$f":"N19/(N19+R19)","v":0.33333333333333331},{"$f":"N19/L19","v":0.14285714285714285},1,2,{"$f":"(R19+N19)/L19","v":0.42857142857142855},0.42857142857142855,1,4,{"$f":"(N19+R19+V19)/L19","v":1},null,1,null,null,null,null,null,{"$f":"N19","v":1},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Risk governance",null,2,null,null,1.1000000000000001,"A2",null,"6.1.3","A1.c",9,1,3,{"$f":"N20/(N20+R20)","v":0.42857142857142855},{"$f":"N20/L20","v":0.33333333333333331},1,4,{"$f":"(R20+N20)/L20","v":0.77777777777777779},0.77777777777777779,1,2,{"$f":"(N20+R20+V20)/L20","v":1},null,3,null,null,null,null,null,{"$f":"N20","v":3},30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"-          Risk assurance & management",null,2,null,null,"1.2; 1.7",null,null,"6.1.3","A1.b",null,1,null,null,null,1,null,null,null,1]
[null,"-          Risk register review",null,2,null,null,1.1000000000000001,null,null,null,"A2.a",null,1,null,null,null,1,null,null,null,1]
[null,"-          Board responsibility",null,2,null,null,1.3,null,null,null,"A1.a",null,1,null,null,null,1,null,null,null,1]
[null,"-          Risk training & culture",null,6,null,null,"1.8; 1.9",null,"1e",null,"A1.c",null,1,null,null,null,1,null,null,null,1]
[null,"SUPPLIER MANAGEMENT"]
[null,"Supply chain security assurance",null,8,5,null,null,"A4","1d","A13.2.2 A13.2.4 A15.1 A15.2","A4.a; B2.b",5,0,null,{"$f":"N26/(N26+R26)","v":0},{"$f":"N26/L26","v":0},1,5,{"$f":"(R26+N26)/L26","v":1},1,1,0,{"$f":"(N26+R26+V26)/L26","v":1},null,null,null,null,null,null,null,null,null,null,null,null,null,5,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,null,null,null,null,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"Roles & responsibilities defined",null,null,null,null,null,null,"6a.6",null,"A4.a",3,0,null,0,0,1,2,0.66666666666666663,0.66666666666666663,1,1,{"$f":"(N27+R27+V27)/L27","v":1},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Access control",null,null,null,null,null,null,null,null,"A4.a; B2.b",6,0,null,null,0,null,null,0,0,1,6,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Security in system procurements",null,null,null,null,null,null,null,"A14.1.1","A4.a",2,0,null,0,0,1,1,0.5,0.5,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/58","v":1.7241379310344827E-2},{"$f":"1/74","v":1.3513513513513514E-2},62,{"$f":"1/62","v":1.6129032258064516E-2},{"$f":"1/74","v":1.3513513513513514E-2}]
[null,"ASSET MANAGEMENT",null,null,null,null,null,null,null,"A8.1"]
[null,"Hardware assets register & management",null,null,null,12,2.2999999999999998,"B4","2d; 6a.1; 6b.1","A8.1.1 A8.1.2 A8.1.3 A8.1.4 A11.2.5 A11.2.6 A11.2.7","A3.a",10,0,null,0,0,1,3,0.3,0.3,1,7,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"Software assets register & management",2,4,null,null,2.2999999999999998,null,"6a.1","A8.1.1 A8.1.2 A8.1.3 A8.1.4 A12.6.2","A3.a",5,1,2,0.5,0.4,1,2,0.8,0.8,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Infrastructure management",null,null,null,null,null,null,null,"A11.2.1 A11.2.2 A11.2.3 A11.2.4","A3.a",5,0,null,0,0,1,1,0.2,0.2,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
["PROTECT","INFORMATION SECURITY MANAGEMENT"]
[null,"Security policy & processes",null,null,"1a","12.2,  12.3",null,"A1; B1","1b","A5.1 A9.1.1  A12.1.1","B1.a",7,0,null,0,0,1,5,0.7142857142857143,0.7142857142857143,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,5,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"Lifecycle management",null,null,null,"3, 9",9.6,"A3","2b","A8.2.3 A8.3.2","A3.a; B3.a; B3.d",9,0,null,0,0,1,8,0.88888888888888884,0.88888888888888884,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},36,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Storage",null,null,null,9,null,null,"2c",null,"B3.a; B3.c",5,0,null,0,0,1,1,0.2,0.2,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null," - cloud/3rd party",null,null,null,9,null,"B3",null,null,"A4.a; B3.a",null,null,null,null,null,1,null,null,null,1]
[null," - on premise",null,null,null,9,null,"B3",null,null,"B3.a",null,null,null,null,null,1,null,null,null,1]
[null,"Information/data classification",null,null,null,null,null,"A2","2a","A8.2.1 A8.2.2 A8.2.3","B3.a",4,0,null,0,0,1,1,0.25,0.25,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"Information assets register",null,null,null,null,null,"A3","2a","A8.2.1 A8.2.3","A3.a; B3.a",5,0,null,0,0,1,3,0.6,0.6,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Information/data transfer controls",null,null,4,4,"10.4; 10.5","B2; B3","2d; 6d","A8.3.3 A13.2.1 A14.1.3","A4.a; B3.a; B3.b",12,0,null,0,0,1,8,0.66666666666666663,0.66666666666666663,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,8,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"PEOPLE"]
[null,"Prior to employment",null,null,null,null,null,null,null,"A7.1",null,3,0,null,0,0,1,1,0.33333333333333331,0.33333333333333331,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,1,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"-          Security screening",null,null,6,null,null,null,null,"A7.1.1",null,null,null,null,null,null,null,null,null,null,1]
[null,"-          T&C",null,null,null,null,null,null,null,"A7.1.2",null,null,null,null,null,null,null,null,null,null,1]
[null,"During employment",null,null,null,null,null,null,null,"A7.2",null,7,0,null,0,0,1,5,0.7142857142857143,0.7142857142857143,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,5,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"-          induction",null,null,null,null,5.2,null,null,"A7.2.1 A7.2.2","B6.b",null,null,null,null,null,1,null,null,null,1]
[null,"-          security roles & responsibilities",null,null,null,12,null,null,null,"A61.1 A7.2.1 A7.3.1","A1.b; B1.a; C1.e",null,null,null,null,null,1,null,null,null,1]
[null,"-          acceptable use policy",null,null,"1d",null,"5.1; 9.1",null,null,"A7.2.1 A9.3.1 A11.2.8 A11.2.9","B1.a",null,null,null,null,null,1,null,null,null,1]
[null,"-          disciplinary procedures",null,null,null,null,5.7,null,null,"A7.2.3","B1.a",null,null,null,null,null,1,null,null,null,1]
[null,"Staff training & awareness culture",null,6,null,12,"4.7; 5.3; 5.5; 9.7; 10.2","B5","1e","A7.2.2","A1.b; B1.a; B6.a; B6.c; C1.e",8,1,1,0.16666666666666666,0.125,1,5,0.75,0.75,1,2,1,null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Staff skills assessment",null,null,null,null,5.4,null,null,null,null,3,0,null,0,0,1,2,0.66666666666666663,0.66666666666666663,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"-  Board"]
[null,"-  SMT",null,null,null,null,null,null,null,null,"B6.c",null,null,null,null,null,null,null,null,null,1]
[null,"- Staff",null,null,null,null,null,null,null,null,"A1.b; B6.b",null,null,null,null,null,null,null,null,null,1]
[null,"- Interim & contractor"]
[null,"Mobile/remote working policy",null,null,3,null,null,null,null,"A6.2.1 A6.2.2 A14.1.2.","B3.d",10,0,null,0,0,1,6,0.6,0.6,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,6,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"SERVICES RESILIENCE"]
[null,"Services Resilience",null,null,null,null,null,null,"3a,b,c","A17.2.1","B5.b",6,0,null,0,0,1,1,0.16666666666666666,0.16666666666666666,1,5,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"ACCESS CONTROL",3,4,null,null,null,"B2",null,"A9.1","B3.a",null,null,null,null,null,1,null,null,null,1]
[null,"Account management","2, 3",4,2,7,4.0999999999999996,null,"4b","A9.1.2 A9.2 A9.4.1 A12.6.2","B2.a; B2.c",10,1,6,0.6,0.6,1,4,1,1,1,0,{"$f":"(N62+R62+V62)/L62","v":1},null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Identity authentication",3,4,2,8,4.2,"B2","5b","A9.4.1","B2.a; B2.d",9,1,2,0.33333333333333331,0.22222222222222221,1,4,0.66666666666666663,0.66666666666666663,1,3,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null," - Password policy","1, 2",4,2,2,null,"B2","7c","A9.4.3",null,null,1,null,null,null,1,null,null,null,1]
[null," - Multi factor authentication",null,null,null,null,null,"B2","7b","A9.4.3","B2.a; B2.c",null,null,null,null,null,1,null,null,null,1]
[null,"Privilege management",3,4,"2; 5",7,"4.1; 4.3","B2","4a; 5a,b","A9.1.2A9.2.3 A9.4.4","B2.a; B2.c; B4.c; C1.b",9,1,3,0.6,0.33333333333333331,1,2,0.55555555555555558,0.55555555555555558,1,4,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},2,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Administrator account management",3,4,5,7,"4.4; 4.6","B2","5a","A9.1.2 A9.2.3 A9.4.4 A9.4.5 ","B2.a; B4.c",5,1,2,0.5,0.4,1,2,0.8,0.8,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},2,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"MEDIA MANAGEMENT",null,null,null,null,null,null,null,"A8.1"]
[null,"Storage media management",null,null,null,9,"9.2; 9.3; 9.4; 9.5","B4","6b.1","A8.1.1 A8.1.2 A8.1.3 A8.1.4 A8.3.2","B3.d B3.e",12,0,null,0,0,1,10,0.83333333333333337,0.83333333333333337,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"-Mobile media/devices",null,null,null,null,"2.7; 9.2; 9.5; 9.6","B3","6b.1; 6b.4","A6.2 A8.1.1 A8.1.2 A8.3.1","B3.a; B3.d B3.e",null,null,null,null,null,1,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Cryptography ",null,null,null,"3, 4",9.5,"B4","6b.4","A10.1 A18.1.5","B3.b; B3.c",8,0,null,0,0,1,7,0.875,0.875,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Remote wipe capability",null,null,null,null,null,null,"6b.5",null,"B3.d",1,0,null,0,0,1,1,1,1,1,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"ENVIRONMENTAL SECURITY"]
[null,"Equipment location",null,null,null,null,null,null,null,"A11.1.4 A11.2.1",null,2,0,null,null,0,null,null,0,{"$f":"(R74+N74)/L74","v":0},1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Power resilience",null,null,null,null,null,null,null,"A11.2.2","A3a",2,0,null,null,0,null,null,0,0,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"PHYSICAL/BUILDING SECURITY"]
[null,"Access control",null,null,"1c",9,null,null,null,"A11.1 A11.1.2",null,8,0,null,0,0,1,7,0.875,0.875,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,7,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Internal security",null,null,"1c",9,null,null,null,"A11.1 A11.1.3 A11.1.6",null,4,0,null,0,0,1,2,0.5,0.5,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,2,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"SYSTEM MANAGEMENT"]
[null,"Secure configuration  ",2,4,"1b",null,"2.4; 10.3","B4","6a.2; 6d.2","A12.4.4 A12.5.1","B4.b",14,1,5,0.45454545454545453,0.35714285714285715,1,6,0.7857142857142857,0.7857142857142857,1,3,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},6,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},58,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"Secure design/development",null,null,null,6,null,null,null,"A12.1.3 A14.2.1 A14.2.3 A14.2.5 A14.2.6 A14.2.7 A14.2.8","B4.a",11,0,null,0,0,1,5,0.45454545454545453,0.45454545454545453,1,6,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,null,null,null,null,null,null,null,null,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Change control procedures",null,null,null,null,"2.6; 2.9","B4",null,"A12.1.2 A14.2.2 A14.2.4","B4.b",5,0,null,0,0,1,2,0.4,0.4,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},36,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"System Testing",null,null,7,11,null,"B4","6a.3; 6d.4","A.2.1.3 A14.2.3 A14.2.8 A14.2.9 A14.3.1","B4.d",12,0,null,0,0,1,9,0.75,0.75,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,9,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"OPERATIONAL SECURITY",null,null,null,null,null,"B4; C1"]
[null,"Malware policies & protection",4,4,"1b",5,"5.1; 7.1",null,"1b","A12.2.1","B4.c",4,1,1,0.25,0.25,1,3,1,1,1,0,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},3,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,50,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null," - AV screening",4,4,null,5,"7.5; 7.6.1",null,"6c.3",null,"B4.c",null,1,null,null,null,1,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2]
[null," - Media scanning",4,4,null,null,7.5,null,null,null,null,null,1,null,null,null,1]
[null," - File scanning",4,4,null,null,7.5,null,null,null,null,null,1,null,null,null,1]
[null,"Email security",null,5,null,null,null,null,"6c.1; 6c.2","A13.2.3",null,4,1,1,{"$f":"N89/(N89+R89)","v":0.25},{"$f":"N89/L89","v":0.25},1,3,{"$f":"(R89+N89)/L89","v":1},1,1,0,1,null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Application security",null," 5",null,null,null,null,"6d.1",null,null,2,1,1,0.5,0.5,1,1,1,1,null,null,1,null,null,null,null,null,null,null,null,30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Vulnerability management & scanning",null,5,"1a","5, 6, 11",2.5,null,null,"A12.6.1","A2.b; B2.b; B4.a; B4.d",12,1,1,0.1111111111111111,8.3333333333333329E-2,1,8,0.75,0.75,1,3,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,3.3333333333333333E-2,3.3333333333333333E-2,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},8,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"-          Executables prevention",4,"4, 5",null,null,"3.1.2; 7.2; 7.5",null,null,null,"B4.b",null,1,null,null,null,1,null,null,null,1]
[null,"-          Peripheral device management",null,null,null,null,2.7,null,null,null,null,null,null,null,null,null,1]
[null,"Data exfiltration monitoring",null,null,null,null,7.2,null,null,null,"C1.a",2,0,null,0,0,1,2,1,1,1,0,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},null,62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Software supported & updated","4, 5","4, 5",null,5,2.1,"B4","6b.3",null,"B4.d",4,1,1,0.33333333333333331,0.25,1,2,0.75,0.75,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},58,{"$f":"1/69","v":1.4492753623188406E-2},null,62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Web site screening",4,4,null,null,7.3,null,null,null,null,1,1,1,1,1,1,0,1,1,null,null,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Browser management",null,null,null,null,"7.6.4",null,null,null,null,3,0,null,0,0,1,3,1,1,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Monitor/audit user activity",null,null,null,10,"4.5; 8.4","B2; C1",null,"A12.4.1 A12.4.3","B2.c; B2.d; C1.a",15,0,null,0,0,1,12,0.8,0.8,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Disabled auto-run",2,2,null,null,"7.6.5",null,null,null,null,1,1,1,1,1,1,null,1,1,null,null,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"NETWORK SECURITY",null,null,null,null,null,"B4",null,"A13.1",null,null,null,null,null,null,1,null,null,null,1]
[null,"Patch management",5,4,"1a",6,2.2000000000000002,"B4","6a.2; 6b.3",null,"B4.d",5,1,1,0.2,0.2,1,4,1,1,1,0,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"Device management",null,null,3,null,"2.7; 7.5; 7.6.6 10.3","B4","5b; 6b.2; 6b.4",null,"B2.b; B2.c; B4.c",9,0,null,0,0,1,5,0.55555555555555558,0.55555555555555558,1,4,1,null,null,null,null,null,null,null,null,null,null,null,null,null,4,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Content screening",null,null,null,null,"3.1.2; 7.2; 7.4; 7.5.3",null,null,null,"B4.a",2,0,null,0,0,1,2,1,1,1,0,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,null,null,null,null,null,null,null,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Internal segregation",null,null,null,null,"3.2.1",null,null,"A.12.1.3 A13.1.3","B4.a; B5.b",5,0,null,0,0,1,2,0.4,0.4,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Wireless security",2,2,null,null,"3.2.3",null,null,null,null,4,1,1,0.25,0.25,1,3,1,1,null,null,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Boundary/Firewall management",1,4,3,"1, 6","3.1.17.6.3",null,null,null,"B4.a",14,1,6,0.46153846153846156,0.42857142857142855,1,7,0.9285714285714286,0.9285714285714286,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},7,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,null,null,null,null,null,null,null,62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Administrator control",null,null,null,null,"3.2.4",null,"6a.5","A.12.4.3","B2.c",4,0,null,0,0,1,3,0.75,0.75,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,50,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Error message management",null,null,null,null,"3.2.5",null,null,null,null,1,0,null,0,0,1,1,1,1,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Penetration testing",null,null,7,11,"3.2.6",null,"6a.3","A.14.2.9","B4.d",4,0,null,0,0,1,4,1,1,1,0,1,null,null,null,null,null,null,null,null,null,null,null,null,null,4,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"IP & DNS management",null,null,null,null,null,null,"6a.4; 6a.6",null,"C1.a",4,1,1,0.33333333333333331,0.25,1,2,0.75,0.75,1,1,1,null,null,15,{"$f":"1/15","v":6.6666666666666666E-2},{"$f":"1/28","v":3.5714285714285712E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/50","v":0.02},1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
["DETECT ","INCIDENT DETECTION"]
[null,"Detection capability",null,null,"1d",null,null,null,"8d","A12.2.1","B2.d; B4.c C1.a; C1.c; C1.d; C2.a; C2.b",11,0,null,0,0,1,4,0.36363636363636365,0.36363636363636365,1,7,1,null,null,null,null,null,null,null,null,null,null,null,null,null,4,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,null,null,null,null,null,null,null,null,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"Security Monitoring",null,null,"1d",null,"3.2.58.1","C1","8b","A12.4","C1.a; C1.e",12,0,null,0,0,1,9,0.75,0.75,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,9,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,46,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},36,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2}]
[null,"INCIDENT MANAGEMENT"]
["RESPOND & RECOVER","Incident response protocol",null,7,"1d; 1e",12,"6.1; 6.3; 6.5; 8.8; 10.6","C1","8a; 9a","A12.2.1 A16.1.1 A16.1.4 A16.1.5","D1.a",13,1,1,0.1,7.6923076923076927E-2,1,9,0.76923076923076927,0.76923076923076927,1,3,{"$f":"(N115+R115+V115)/L115","v":1},null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},3,27,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},46,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,36,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"Incident reporting procedure",null,7,"1d; 1e",null,"5.6; 6.6; 6.9; 6.10","C1, D2","9a; 9b; 9c","A12.4 A16.1.2 A16.1.3","B6.a; D1.a",5,1,1,0.2,0.2,1,4,1,1,1,0,1,null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Staff training & testing",null,null,null,null,"5.2; 5.3","D1","9a; 9d","A7.2.2 A12.2.1","B6.a; B6b; B6.c",6,0,null,0,0,1,6,1,1,1,0,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Post-incident review & learning",null,3,"1.e",null,"6.7; 6.8; 8.9","D2","9d; 9e; 9f; 10c","A16.1.6 A16.1.7","D2.a; D2.b",8,1,1,0.2,0.125,1,4,0.625,0.625,1,3,1,null,null,null,null,null,null,null,null,30,{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/30","v":3.3333333333333333E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/74","v":1.3513513513513514E-2},4,27,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},null,null,null,null,46,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"BUSINESS CONTINUITY ",null,null,null,null,null,"D1"]
[null,"Data recover capability",null,null,null,null,6.4,"D1",null,"A12.3.1","B3.c; D1.a",2,0,null,0,0,1,1,0.5,0.5,1,1,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,46,{"$f":"1/46","v":2.1739130434782608E-2},{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},36,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,58,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,62,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2]
[null,"Back up policies & procedures",null,null,null,null,null,"D1",null,"A12.3.1","B3.c; B5.c",6,0,null,0,0,1,3,0.5,0.5,1,3,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,null,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Disaster recovery policies & procedures",null,null,null,null,null,"D1","10a","A12.3.1 A17.1.1 A17.1.2","B3.c; B5.a; B5.c; D1.b",8,0,null,0,0,1,2,0.25,0.25,1,6,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,{"$f":"1/69","v":1.4492753623188406E-2},1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"BC/DR testing policies & procedures",null,null,null,null,null,"D1","10a; 10b","A12.3.1 A17.1.3","B5.a; B5.c; D1.c",8,0,null,0,0,1,2,0.25,0.25,1,6,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,36,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,1.4492753623188406E-2,1.4492753623188406E-2,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"Data Loss impact assessments",null,null,null,null,null,null,"3d",null,"B3.a",3,0,null,0,0,1,1,0.33333333333333331,0.33333333333333331,1,2,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,null,null,null,62,1.4492753623188406E-2,1.4492753623188406E-2]
[null,"BC contingency plan",null,null,null,null,null,null,"10a","A17.1.1 A17.2.1","A3.a; B3.b; D1.a",8,0,null,0,0,1,1,0.125,0.125,1,7,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,50,1.4492753623188406E-2,1.4492753623188406E-2,1.4492753623188406E-2,58,{"$f":"1/69","v":1.4492753623188406E-2},{"$f":"1/69","v":1.4492753623188406E-2},62,1.4492753623188406E-2,1.4492753623188406E-2]
[]
[null,"SUMMARY","CE","PSAP","PCI","PSN","10 Steps","GDPR","HMG SPF","ISO 27001","NIS ","S",{"$f":"SUM(M9:M125)","v":39},null,null,null,{"$f":"SUM(Q9:Q125)","v":93},null,null,null,{"$f":"SUM(U9:U125)","v":90},null,null,"S",null,null,{"$f":"SUM(AA9:AA125)","v":0.99999999999999989},{"$f":"SUM(AB9:AB125)","v":0.53571428571428559},{"$f":"SUM(AC9:AC125)","v":0.21739130434782614},{"$f":"SUM(AD9:AD125)","v":0.20270270270270271},null,null,{"$f":"SUM(AG9:AG125)","v":0.99999999999999989},{"$f":"SUM(AH9:AH125)","v":0.99999999999999989},{"$f":"SUM(AI9:AI125)","v":0.43478260869565233},{"$f":"SUM(AJ9:AJ125)","v":0.40540540540540515},null,null,{"$f":"SUM(AM9:AM125)","v":0.39130434782608708},{"$f":"SUM(AN9:AN125)","v":0.39130434782608708},{"$f":"SUM(AO9:AO125)","v":0.39130434782608708},null,{"$f":"SUM(AQ9:AQ125)","v":0.39130434782608708},{"$f":"SUM(AR9:AR125)","v":0.39130434782608708},{"$f":"SUM(AS9:AS125)","v":0.39130434782608708},null,{"$f":"SUM(AU9:AU125)","v":0.67391304347826053},{"$f":"SUM(AV9:AV125)","v":0.69565217391304301},{"$f":"SUM(AW9:AW125)","v":0.69565217391304301},null,{"$f":"SUM(AY9:AY125)","v":0.52173913043478271},{"$f":"SUM(AZ9:AZ125)","v":0.52173913043478271},{"$f":"SUM(BA9:BA125)","v":0.52173913043478271},null,{"$f":"SUM(BC9:BC125)","v":0.71565217391304303},{"$f":"SUM(BD9:BD125)","v":0.71014492753623137},{"$f":"SUM(BE9:BE125)","v":0.71014492753623137},null,{"$f":"SUM(BG9:BG125)","v":0.84332833583208311},{"$f":"SUM(BH9:BH125)","v":0.81061496278887502},null,{"$f":"SUM(BJ9:BJ125)","v":0.90018700327255619},{"$f":"SUM(BK9:BK125)","v":0.89757148452800517}]
[null,"% of sub-categories included within each framework/standard",0.18,0.39,0.31,0.31,0.57999999999999996,0.6,0.62,0.72,0.8]
[null,"Baseline total sub cats"]
[null,"Target total sub cats"]
[null,"Advanced totla subcats"]
[]
[]
[]
[]
[]
[]
[]
[null,null,null,null,null,null,null,null,null,null,null,{"$f":"SUM(L8:L126)","v":482},null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"COUNTIF(Y9:Y125,\">0\")","v":9},15,15,15,15,15,9,30,30,30,30,30,27,27,27,27,27,27,27,27,27,46,46,48,48,36,36,36,36,49,49,49,49,58,58,56,62,62,62]