信息安全承諾書

Commitment on Information Security

1. 為了保護(hù)XXXX向物流商開放的用戶個(gè)人信息的信息安全，物流商向XXXX鄭重承諾遵守以下條款：

1. In order to protect the users' personal information released by XXXX to the logistics provider, the logistics provider solemnly undertakes to XXXX to abide by the following terms:

1.1 建立和完善信息安全管理制度，認(rèn)真落實(shí)信息安全技術(shù)防護(hù)措施；定期開展風(fēng)險(xiǎn)評(píng)估工作，認(rèn)真排查自身信息系統(tǒng)的安全隱患和漏洞，對(duì)薄弱環(huán)節(jié)和潛在威脅采取切實(shí)有效的整改措施，以避免和消除信息安全風(fēng)險(xiǎn)，確保信息系統(tǒng)安全可靠地運(yùn)行。

1.1 Establish and improve the information security management system, and seriously implement the protection measures with information security technology; regularly carry out risk assessment, carefully check the hidden security risks and bugs of its own information systems, and take practical and effective rectification measures for weak links and potential threats to avoid and eliminate information security risks and ensure the safe and reliable operation of information systems.

1.2 建立和健全相應(yīng)的數(shù)據(jù)分類分級(jí)規(guī)范、敏感信息操作日志和基礎(chǔ)架構(gòu)日志規(guī)范，并嚴(yán)格按照數(shù)據(jù)分類分級(jí)規(guī)范使用用戶個(gè)人信息，確保用戶個(gè)人資料不泄漏。

1.2 Establish and improve relevant specifications for data classification, sensitive information operation log and infrastructure log, and use the users' personal information in strict accordance with the specifications on data classification to ensure that such information won't be leaked.

1.3 僅將從XXXX獲取的用戶個(gè)人信息用于物流商履行提供《XXXX平臺(tái)合作協(xié)議》（下稱“合作協(xié)議”）及各產(chǎn)品協(xié)議下的物流服務(wù)的用途。未經(jīng)XXXX事先書面允許，不得超范圍使用，更不得以任何形式提供給第三方。

1.3 The users' personal information obtained from XXXX is only used by the logistics Provider to perform and provide the logistics services under XXXX Platform Cooperation Agreement (hereinafter referred to as the "Cooperation Agreement") and various product agreements. Without the prior written approval of XXXX, it shall not be used beyond the scope, nor shall it be provided to any third party in any form.

1.4 積極開展信息安全對(duì)接與信息安全檢查工作。

1.4 Actively carry out communication and inspection in information security.

1.5 物流商在信息系統(tǒng)發(fā)生重大安全事故時(shí)，立即采取應(yīng)急措施，避免對(duì)消費(fèi)者或XXXX業(yè)務(wù)造成持續(xù)影響。

1.5 In case of a major security accident in the information system, the logistics provider shall immediately take emergency measures to avoid continuous impact on consumers or XXXX's businesses.

1.6 建立信息安全責(zé)任制度，加強(qiáng)組織領(lǐng)導(dǎo)，設(shè)立信息安全第一責(zé)任人、負(fù)責(zé)人和聯(lián)系人，并明確各自的具體職責(zé)。物流商信息安全第一責(zé)任人、負(fù)責(zé)人和聯(lián)系人的相關(guān)資料見下表。如果信息安全負(fù)責(zé)人、聯(lián)系人發(fā)生變更的，應(yīng)由物流商第一責(zé)任人聯(lián)系郵箱發(fā)出郵件通知XXXX。物流商信息安全聯(lián)系人應(yīng)當(dāng)保持7*24小時(shí)可聯(lián)系。

1.6 Establish information security responsibility system, strengthen organization and leadership, set up the first person in charge, the persons in charge and contact persons responsible for information security, and specify their responsibilities. The relevant information about such persons are seen in the table below. If the persons in charge and contact persons change, the first person in charge shall notify XXXX through email. The contact persons responsible for the information security of the logistics provider shall be available for 7 * 24 hours.

乙方保證其此處及后續(xù)向XXXX披露的責(zé)任人、聯(lián)系人個(gè)人信息的行為已獲得其本人的知情同意。

Party B guarantees that its disclosure of the personal information about the persons in charge and contact persons to XXXX currently and subsequently has obtained their consent.

1.1 乙方對(duì)接入XXXX的應(yīng)用，應(yīng)明確數(shù)據(jù)安全要求和責(zé)任，乙方需要對(duì)相關(guān)應(yīng)用加強(qiáng)數(shù)據(jù)安全管理和保護(hù)。乙方應(yīng)用發(fā)生數(shù)據(jù)安全事件對(duì)用戶造成損失的，乙方應(yīng)當(dāng)承擔(dān)部分或全部責(zé)任，除非乙方能夠證明無(wú)過錯(cuò)。

1.7 Party B shall specify the data security requirements and responsibilities for the applications connected to XXXX, and also needs to strengthen data security management and protection of relevant applications. If a data security incident occurs in Party B's application and causes losses to users, Party B shall bear part or all of the responsibilities, unless Party B can prove that there is no fault.

1.2 XXXX鼓勵(lì)乙方自愿的通過國(guó)家或者行業(yè)認(rèn)證和測(cè)評(píng)，包括但不限于：等級(jí)保護(hù)測(cè)評(píng)、GDPR認(rèn)證、SOC2認(rèn)證、滲透測(cè)試報(bào)告等；

1.8 XXXX encourages Party B to voluntarily pass national or industrial certification and assessment, including but not limited to: grade protection assessment, GDPR certification, SOC2 certification, and penetration test report, etc.;

1.3 乙方需要有安全責(zé)任人履行下列職責(zé)：

1.9 Party B needs to designate persons in charge of security to perform the following duties:

-組織制定數(shù)據(jù)安全保護(hù)計(jì)劃并督促落實(shí)；

- Organize the formulation of data security protection plan and supervise its implementation;

-組織開展數(shù)據(jù)安全風(fēng)險(xiǎn)評(píng)估，督促整改安全隱患；

- Organize and carry out data security risk assessment, as well as supervise and urge the rectification of potential security risks;

-在發(fā)生數(shù)據(jù)安全事件時(shí)，積極與XXXX方配合進(jìn)行應(yīng)急響應(yīng)及事件處置。

-  Actively cooperate with XXXX in emergency response and incident handling in case of data security incidents.

1.4 乙方從XXXX調(diào)取的數(shù)據(jù)，務(wù)必要保證數(shù)據(jù)的保密性，任何情況下，未經(jīng)XXXX公司的書面確認(rèn)，不得將XXXX數(shù)據(jù)以任何形式輸出給第三方；

1.10 Party B shall ensure the confidentiality of the data obtained from XXXX and shall not deliver such data to any third party in any form without written confirmation by XXXX Company under any circumstances;

專業(yè)英語(yǔ)翻譯公司推薦介紹：

玖九翻譯公司從創(chuàng)立至今，對(duì)英語(yǔ)翻譯售后服務(wù)的重視程度與日俱增，采取的是純粹的手工翻譯方式，我們將嚴(yán)格按照行業(yè)規(guī)范和合同要求提供翻譯服務(wù)，在項(xiàng)目成功后，我們會(huì)一直與客戶保持良好的關(guān)系，如果您認(rèn)為我們的譯文質(zhì)量不合格，請(qǐng)及時(shí)反饋，我們可以免費(fèi)進(jìn)行改進(jìn)和完善，并且在項(xiàng)目結(jié)束后，我們會(huì)根據(jù)需要開具收據(jù)或者發(fā)票，客戶有什么問題可以隨時(shí)和我們溝通。

　　我們作為國(guó)內(nèi)知名專業(yè)英語(yǔ)翻譯公司之一，始終秉承"立信求是、精益求精"的企業(yè)精神，堅(jiān)持"誠(chéng)信服務(wù)、顧客至上"的經(jīng)營(yíng)理念，我們專業(yè)的翻譯團(tuán)隊(duì)和多年的翻譯經(jīng)驗(yàn)，贏得了眾多客戶的好評(píng)。已為多家世界500強(qiáng)企業(yè)提供翻譯服務(wù)。憑借著自身積累的資源，我們組成了一個(gè)較為完備的英語(yǔ)翻譯人才項(xiàng)目組，譯員大多都具有8年以上的行業(yè)專業(yè)翻譯經(jīng)驗(yàn)，并且均由有著資深行業(yè)背景知識(shí)和行業(yè)翻譯經(jīng)驗(yàn)，對(duì)行業(yè)有著比較深刻的理解，掌握著大量的最前沿的行業(yè)術(shù)語(yǔ)。

　　本公司是一家經(jīng)過工商行政管理局注冊(cè)的具有涉外翻譯資格的優(yōu)秀英語(yǔ)翻譯公司，并配備了一支專業(yè)的人力翻譯隊(duì)伍，本司英語(yǔ)翻譯專業(yè)譯員在英語(yǔ)方面均有5年以上的工作經(jīng)驗(yàn)。英語(yǔ)翻譯譯員均經(jīng)專業(yè)培訓(xùn)，其中大部分為海外學(xué)習(xí)或國(guó)外工作經(jīng)驗(yàn)，具備較強(qiáng)的英語(yǔ)翻譯技能。我司英語(yǔ)翻譯團(tuán)隊(duì)的成員對(duì)行業(yè)發(fā)展、專業(yè)術(shù)語(yǔ)等有著深刻的理解，憑借著嚴(yán)謹(jǐn)?shù)馁|(zhì)量控制體系、規(guī)范化的操作程序、獨(dú)特的審稿標(biāo)準(zhǔn)，我們已經(jīng)為許多著名的公司和機(jī)構(gòu)提供了優(yōu)質(zhì)的英語(yǔ)翻譯服務(wù)。

　　如果您有翻譯方面的需求，歡迎致電專業(yè)翻譯公司玖九翻譯中心熱線：0731-86240899或者微信咨詢（QQ/微信同號(hào)：747700212），我們玖九翻譯中心將竭誠(chéng)為您服務(wù)。