{"text_format":"1","workbook":"xlsx","n_sheets":12,"sheets":["Intro","Condition","Assessment","Overview","TempComplianceOverview","Comparison","TempComparison","TempComparison1","TempComparison2","TempComparison3","TempComparison4","TempComparison5"],"not_rendered":{"charts":32,"images":1,"macros":1,"external_links":1,"defined_names":37,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Intro","index":0,"n_rows":29,"n_cols":3,"rows_kept":29,"cut":false,"hidden":false,"merged":[[3,1,3,7],[6,1,6,7],[7,0,7,1],[15,1,15,7],[8,2,8,7],[9,2,9,7],[10,2,10,7],[11,2,11,7],[12,2,12,7],[28,1,28,7],[25,1,25,7],[22,1,22,7],[23,1,23,7],[24,1,24,7],[26,1,26,7],[27,1,27,7],[16,1,16,7],[18,1,18,7],[19,1,19,7],[17,1,17,7],[21,1,21,7],[20,1,20,7]]}
[]
["Smals Client Guide Cloud Assessment Model"]
["VERSION:","2.3"]
["LICENSE:","Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License "]
[null,"http://creativecommons.org/licenses/by-nc-sa/4.0/"]
[]
[]
["Change tracking"]
["1.0","2014-11-28","First release"]
["2.0","2014-12-16","The ponderations are now locked"]
["2.1","2015-01-12","Some details regarding Question 2.1 of the assessment sheet are added"]
["2.2","2015-05-19","Some visual and security enhancements have been added"]
["2.3","2016-04-21","Some answers have been adapted"]
[]
["How to use this template:"]
["1.","The goal of this evaluation form is for a person (called client) willing to use a cloud service offered by a Cloud Service Provider (CSP) to assess if his/her wish is possible, depending on the type of data that is intended to be moved to the cloud service and according to the 4 main characteristics expected of a cloud service:\n- Governance\n- Identity and Access Management (IAM)\n- IT Security\n- Operational Security"]
["2.","The \"Assessment\" tab contains all the questions necessary for the client to assess what he/she expects from a cloud service."]
["2.1.","First fill all the client name at the beginning."]
["2.2.","The column \"answer's value\" contains the relative score of each expected response for each question (over 100) as a reference. The cells containing the relative scores must not be changed."]
["2.3.","The column \"score\" has to be filled using the possible answers. "]
["2.4.","Each question has been defined with a specific weight. From the scores of each question, the final weighted scores (called \"required scores\") are automatically filled (in combination with the defined weights)."]
["3.","The \"Overview\" tab is a visual aide. "]
["3.1.","The chart represents the required scores."]
["3.2.","It is further possible to paste the scores of a cloud service that has been assessed, and to see if it satisfies the client's requirements."]
["3.3.","The donuts represent the compliance to the cloud policy per criterion depending on the type of data that is intended to be moved to a cloud service."]
["4.","The \"Comparison\" tab is another visual aide where it is possible to paste the scores of several cloud services that have been assessed."]
["4.1.","The charts allow the client to see which cloud service fits best his/her requirements."]
["4.2.","Here as well, the donuts represent the compliance to the cloud policy per criterion depending on the type of data that is intended to be moved to a cloud service."]
["5.","Be careful with the interpretation of the scores. This evaluation form is informative, and only a human judge should decide whether of not the evaluation is accurate enough. The human judge should contact the CSP(s) of the cloud service(s) if he needs additional information."]

{"sheet":"Condition","index":1,"n_rows":7,"n_cols":16,"rows_kept":7,"cut":false,"hidden":true,"merged":[]}
["Service model","DataToMove",null,"If question with \"public cloud\" answer","If question with \"community cloud\" answer","If question with private cloud\" answer","If question with \"very high\" answer","If question with \"very high\" answer and  internal, company data","If question with \"very high\" answer and  personal, social, medical data","If DataToMove=Public","If DataToMove=Internal to the company","If DataToMove=Confidential of the company","If DataToMove=Personal","If DataToMove=Personal and social","If DataToMove=Medical","Chart options"]
["SaaS","Public",null,"Public cloud","Community cloud","Private cloud","Low","Medium","High","Low","Medium","Medium","High","High","High","Cloud service DOES satisfy"]
["PaaS","Internal to the company",null,"Community cloud","Private cloud",null,"Medium","High","Very high","Medium","High","High",null,null,null,"Cloud service MAY satisfy"]
["IaaS","Confidential of the company",null,"Private cloud",null,null,"High","Very high",null,"High",null,null,null,null,null,"Cloud service DOES NOT satisfy"]
[null,"Personal",null,null,null,null,"Very high"]
[null,"Personal and social"]
[null,"Medical"]

{"sheet":"Assessment","index":2,"n_rows":93,"n_cols":8,"rows_kept":93,"cut":false,"hidden":false,"merged":[[2,1,2,2],[3,1,3,2],[4,1,4,2],[0,1,0,7],[5,1,5,2],[6,1,6,2],[10,1,10,2],[19,1,19,2],[17,1,17,2],[18,1,18,2],[7,1,7,2],[8,1,8,2],[9,1,9,2],[42,1,42,2],[20,1,20,2],[21,1,21,2],[25,1,25,2],[26,1,26,2],[27,1,27,2],[28,1,28,2],[29,1,29,2],[34,1,34,2],[35,1,35,2],[36,1,36,2],[37,1,37,2],[57,1,57,2],[43,1,43,2],[44,1,44,2],[45,1,45,2],[50,1,50,2],[51,1,51,2],[52,1,52,2],[53,1,53,2],[54,1,54,2],[55,1,55,2],[56,1,56,2],[49,1,49,2],[78,1,78,2],[58,1,58,2],[59,1,59,2],[60,1,60,2],[64,1,64,2],[65,1,65,2],[66,1,66,2],[67,1,67,2],[71,1,71,2],[72,1,72,2],[73,1,73,2],[74,1,74,2],[88,1,88,2],[89,1,89,2],[79,1,79,2],[80,1,80,2],[81,1,81,2],[82,1,82,2],[86,1,86,2],[87,1,87,2]]}
[null,"<Fill client name>"]
[]
[null,"Category Title",null,"Answer's value","Score","Weight","Measured score","Required score"]
[null,"For more information open the outline (+ / - ) left from row number",null,"Possibility to put some description in the question's rows","Select appropriate range or value for every question (even if not applicable N/A)","Fixed values per question"]
[0,"Data Type"]
["0.1","What type of data is intended to be moved to a cloud service?"]
[]
[null,"Explanations / Examples"]
[null,"The choices of data type are extracted from the Data Classification Policy of the Social Security."]
[]
[null,"Score specification"]
[null,"Public","e.g. web site of BCSS/KSZ"]
[null,"Internal to the company","e.g. internal strategy, agenda, contact, email"]
[null,"Confidential of the company","e.g. financial roadmap"]
[null,"Personal","e.g. HR personal folder"]
[null,"Personal and social","e.g. RN data"]
[null,"Medical","e.g. medical record"]
[]
[1,"Governance",null,null,null,{"$f":"F20","v":1},null,{"$f":"H20/100","v":0}]
["1.1","Which level of governance must be attained by the cloud service?",null,null,null,1,{"$f":"IF(ISBLANK($E$20),0,VLOOKUP($E$20,$B$23:$D$25,3,0))","v":0},{"$f":"G20*F20","v":0}]
[]
[null,"Score specification"]
[null,"Low","nothing particular, no contractual guarantee",20]
[null,"Medium","some certifications, no third party audits, not subject to non-EU laws, some business continuity guaranteed, no segregation of duties guaranteed",50]
[null,"High","security and Tier 3 (minimum) certifications, third party audits with scope accurately defined, SLA, not subject to non-EU laws, business continuity ensured, complete segregation of duties",75]
[]
[2,"Identity and Access Management (IAM)",null,null,null,{"$f":"(F28+F36+F44)","v":1},null,{"$f":"(H28+H36+H44)/100","v":0}]
["2.1","Which level of authentication must be offered by the cloud service? ",null,null,null,0.34,{"$f":"IF(ISBLANK($E$28),0,VLOOKUP($E$28,$B$31:$D$34,3,0))","v":0},{"$f":"G28*F28","v":0}]
[]
[null,"Score specification"]
[null,"Low","username-password throught Internet",10]
[null,"Medium","username-password throught Intranet of secure VPN",60]
[null,"High","username-password-token/certificate, documented and enforced password policy and password reset procedure",75]
[null,"Very high","username-password-token/certificate-location, documented and enforced password policy and password reset procedure",85]
[]
["2.2","Which level of control on the user management must be proposed by the cloud service?",null,null,null,0.33,{"$f":"IF(ISBLANK($E$36),0,VLOOKUP($E$36,$B$39:$D$42,3,0))","v":0},{"$f":"G36*F36","v":0}]
[]
[null,"Score specification"]
[null,"Low","stored and managed by the CSP",10]
[null,"Medium","stored by the CSP but managed by the tenant",30]
[null,"High","integration with the tenant’s IAM as LDAP/AD",75]
[null,"Very high","integration with an ID-provider as FAS",85]
[]
["2.3","Which level of access management must be provided by the cloud service?",null,null,null,0.33,{"$f":"IF(ISBLANK($E$44),0,VLOOKUP($E$44,$B$47:$D$49,3,0))","v":0},{"$f":"G44*F44","v":0}]
[]
[null,"Score specification"]
[null,"Low","nothing particular",20]
[null,"Medium","summary IAM documentation and data access control",50]
[null,"High","IAM (cloud service and CSP organization) documentation and logging, restricted data access control clearly defined (only tenant users, tenant system administrator and CSP system administrators may have access to data to a certain extent)",75]
[]
[3,"IT Security",null,null,null,{"$f":"(F52+F59+F66+F73)","v":1},null,{"$f":"(H52+H59+H66+H73)/100","v":0}]
["3.1","Which deployment model must be provided by the cloud service?",null,null,null,0.33,{"$f":"IF(ISBLANK($E$52),0,VLOOKUP($E$52,$B$55:$D$57,3,0))","v":0},{"$f":"G52*F52","v":0}]
[]
[null,"Score specification"]
[null,"Public cloud",null,20]
[null,"Community cloud",null,50]
[null,"Private cloud",null,75]
[]
["3.2","Which level of interface security must be provided by the cloud service?",null,null,null,0.16,{"$f":"IF(ISBLANK($E$59),0,VLOOKUP($E$59,$B$62:$D$64,3,0))","v":0},{"$f":"G59*F59","v":0}]
[]
[null,"Score specification"]
[null,"Low","nothing particular",20]
[null,"Medium","data integrity and security",50]
[null,"High","data integrity and security, APIs following standards",75]
[]
["3.3","Which level of infrastructure and virtualization security must be achieved by the cloud service?",null,null,null,0.3,{"$f":"IF(ISBLANK($E$66),0,VLOOKUP($E$66,$B$69:$D$71,3,0))","v":0},{"$f":"G66*F66","v":0}]
[]
[null,"Score specification"]
[null,"Low","strict minimum such as only firewalls",20]
[null,"Medium","firewalls, simple logging, SSL/TLS communications, approximate data deletion",50]
[null,"High","firewalls, APT detection tools, IDS/IPS, logging, file integrity monitoring, DLP, SSL/TLS communications, comprehensive and secure data deletion",75]
[]
["3.4","Which level of cryptography must be provided by the cloud service?",null,null,null,0.21,{"$f":"IF(ISBLANK($E$73),0,VLOOKUP($E$73,$B$76:$D$78,3,0))","v":0},{"$f":"G73*F73","v":0}]
[]
[null,"Score specification"]
[null,"Low","CSP or subcontractor in charge of key management",20]
[null,"Medium","NIST or ISO/IEC27002:2013 standards followed, data-at-rest integrity, tenant or trusted third party in charge of key management",50]
[null,"High","NIST or ISO/IEC27002:2013 standards followed, HSMs, data-at-rest integrity and confidentiality, client-side encryption, tenant in charge of key management",80]
[]
[4,"Operational Security",null,null,null,{"$f":"(F81+F88)","v":1},null,{"$f":"(H81+H88)/100","v":0}]
["4.1","Which level of backup and disaster recovery must be provided by the cloud service?",null,null,null,0.5,{"$f":"IF(ISBLANK($E$81),0,VLOOKUP($E$81,$B$84:$D$86,3,0))","v":0},{"$f":"G81*F81","v":0}]
[]
[null,"Score specification"]
[null,"Low","no secure disaster recovery service, no backup control, no adaptable backup retention plan",20]
[null,"Medium","acceptable RTO (< 1 day), RPO (1 day) and backup control, no adaptable backup retention plan, one recovery test",50]
[null,"High","short RTO (< 1 hour) and RPO (1 hour), backup control and adaptable backup retention plan, regular recovery tests",75]
[]
["4.2","Which level of incident management must be provided by the cloud service?",null,null,null,0.5,{"$f":"IF(ISBLANK($E$88),0,VLOOKUP($E$88,$B$91:$D$93,3,0))","v":0},{"$f":"G88*F88","v":0}]
[]
[null,"Score specification"]
[null,"Low","nothing particular",20]
[null,"Medium","simple incident management procedure",50]
[null,"High","SIEM, incident management procedure, security policies and procedure for employees",75]

{"sheet":"Overview","index":3,"n_rows":9,"n_cols":11,"rows_kept":9,"cut":false,"hidden":false,"merged":[[2,8,2,10],[0,1,0,10]]}
[null,{"$f":"CONCATENATE(\"Score overview of \",TempComplianceOverview!J3)","v":"Score overview of "}]
[]
[null,null,null,null,null,null,null,null,{"$f":"CONCATENATE(\"Compliance with cloud policy when data type is: \",Assessment!E6)","v":"Compliance with cloud policy when data type is: "}]
[null,null,"Minimal weighted score","Maximal weighted score","Required score","Does the cloud service satisfy the required score?",null,null,"Does comply","May comply","Does not comply"]
[1,"Governance",{"$f":"TempComplianceOverview!B3","v":0},{"$f":"TempComplianceOverview!C3","v":0},{"$f":"Assessment!H19","v":0},{"$f":"IF(E5<=C5, Condition!$P$2, IF(E5 <=D5, Condition!$P$3, Condition!$P$4))","v":"Cloud service DOES satisfy"},null,"Governance",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!D3,TempComplianceOverview!G3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!E3,TempComplianceOverview!H3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!F3,TempComplianceOverview!I3)","v":0}]
[1,"IAM",{"$f":"TempComplianceOverview!B4","v":0},{"$f":"TempComplianceOverview!C4","v":0},{"$f":"Assessment!H27","v":0},{"$f":"IF(E6<=C6, Condition!$P$2, IF(E6 <=D6, Condition!$P$3, Condition!$P$4))","v":"Cloud service DOES satisfy"},null,"IAM",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!D4,TempComplianceOverview!G4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!E4,TempComplianceOverview!H4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!F4,TempComplianceOverview!I4)","v":0}]
[1,"IT Security",{"$f":"TempComplianceOverview!B5","v":0},{"$f":"TempComplianceOverview!C5","v":0},{"$f":"Assessment!H51","v":0},{"$f":"IF(E7<=C7, Condition!$P$2, IF(E7 <=D7, Condition!$P$3, Condition!$P$4))","v":"Cloud service DOES satisfy"},null,"IT Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!D5,TempComplianceOverview!G5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!E5,TempComplianceOverview!H5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!F5,TempComplianceOverview!I5)","v":0}]
[1,"Operational Security",{"$f":"TempComplianceOverview!B6","v":0},{"$f":"TempComplianceOverview!C6","v":0},{"$f":"Assessment!H80","v":0},{"$f":"IF(E8<=C8, Condition!$P$2, IF(E8 <=D8, Condition!$P$3, Condition!$P$4))","v":"Cloud service DOES satisfy"},null,"Operational Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!D6,TempComplianceOverview!G6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!E6,TempComplianceOverview!H6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComplianceOverview!F6,TempComplianceOverview!I6)","v":0}]
[null,null,null,null,null,{"$f":"IF(OR(F5=Condition!$P$4,F6=Condition!$P$4,F7=Condition!$P$4,F8=Condition!$P$4), Condition!$P$4, IF(OR(F5=Condition!$P$3,F6=Condition!$P$3,F7=Condition!$P$3,F8=Condition!$P$3),Condition!$P$3,Condition!$P$2))","v":"Cloud service DOES satisfy"}]

{"sheet":"TempComplianceOverview","index":4,"n_rows":6,"n_cols":10,"rows_kept":6,"cut":false,"hidden":true,"merged":[[0,3,0,5],[0,6,0,8]]}
[null,null,null,"Compliance with cloud policy (not depending on data type)",null,null,"Compliance with cloud policy (depending on data type)"]
[null,"Minimal weighted score","Maximal weighted score","Does comply","May comply","Does not comply","Does comply","May comply","Does not comply","Name of the cloud service"]
["Governance"]
["IAM"]
["IT Security"]
["Operational Security"]

{"sheet":"Comparison","index":5,"n_rows":9,"n_cols":13,"rows_kept":9,"cut":false,"hidden":false,"merged":[[0,1,0,12],[2,11,3,12],[2,3,3,4],[2,5,3,6],[2,7,3,8],[2,9,3,10]]}
[null,{"$f":"CONCATENATE(\"Comparison when data type is: \",Assessment!E6)","v":"Comparison when data type is: "}]
[]
[null,null,null,{"$f":"IF(TempComparison1!J3=\"\",\"<Cloud Service 1>\",TempComparison1!J3)","v":"<Cloud Service 1>"},null,{"$f":"IF(TempComparison2!J3=\"\",\"<Cloud Service 2>\",TempComparison2!J3)","v":"<Cloud Service 2>"},null,{"$f":"IF(TempComparison3!J3=\"\",\"<Cloud Service 3>\",TempComparison3!J3)","v":"<Cloud Service 3>"},null,{"$f":"IF(TempComparison4!J3=\"\",\"<Cloud Service 4>\",TempComparison4!J3)","v":"<Cloud Service 4>"},null,{"$f":"IF(TempComparison5!J3=\"\",\"<Cloud Service 5>\",TempComparison5!J3)","v":"<Cloud Service 5>"}]
[]
[null,null,"Required score","Minimal weighted score","Maximal weighted score","Minimal weighted score","Maximal weighted score","Minimal weighted score","Maximal weighted score","Minimal weighted score","Maximal weighted score","Minimal weighted score","Maximal weighted score"]
[null,"Governance",{"$f":"Assessment!H19","v":0},{"$f":"TempComparison1!B3","v":0},{"$f":"TempComparison1!C3","v":0},{"$f":"TempComparison2!B3","v":0},{"$f":"TempComparison2!C3","v":0},{"$f":"TempComparison3!B3","v":0},{"$f":"TempComparison3!C3","v":0},{"$f":"TempComparison4!B3","v":0},{"$f":"TempComparison4!C3","v":0},{"$f":"TempComparison5!B3","v":0},{"$f":"TempComparison5!C3","v":0}]
[null,"IAM",{"$f":"Assessment!H27","v":0},{"$f":"TempComparison1!B4","v":0},{"$f":"TempComparison1!C4","v":0},{"$f":"TempComparison2!B4","v":0},{"$f":"TempComparison2!C4","v":0},{"$f":"TempComparison3!B4","v":0},{"$f":"TempComparison3!C4","v":0},{"$f":"TempComparison4!B4","v":0},{"$f":"TempComparison4!C4","v":0},{"$f":"TempComparison5!B4","v":0},{"$f":"TempComparison5!C4","v":0}]
[null,"IT Security",{"$f":"Assessment!H51","v":0},{"$f":"TempComparison1!B5","v":0},{"$f":"TempComparison1!C5","v":0},{"$f":"TempComparison2!B5","v":0},{"$f":"TempComparison2!C5","v":0},{"$f":"TempComparison3!B5","v":0},{"$f":"TempComparison3!C5","v":0},{"$f":"TempComparison4!B5","v":0},{"$f":"TempComparison4!C5","v":0},{"$f":"TempComparison5!B5","v":0},{"$f":"TempComparison5!C5","v":0}]
[null,"Operational Security",{"$f":"Assessment!H80","v":0},{"$f":"TempComparison1!B6","v":0},{"$f":"TempComparison1!C6","v":0},{"$f":"TempComparison2!B6","v":0},{"$f":"TempComparison2!C6","v":0},{"$f":"TempComparison3!B6","v":0},{"$f":"TempComparison3!C6","v":0},{"$f":"TempComparison4!B6","v":0},{"$f":"TempComparison4!C6","v":0},{"$f":"TempComparison5!B6","v":0},{"$f":"TempComparison5!C6","v":0}]

{"sheet":"TempComparison","index":6,"n_rows":7,"n_cols":16,"rows_kept":7,"cut":false,"hidden":true,"merged":[]}
[]
[]
[null,"temp1-does","temp1-may","temp1-not","temp2-does","temp2-may","temp2-not","temp3-does","temp3-may","temp3-not","temp4-does","temp4-may","temp4-not","temp5-does","temp5-may","temp5-not"]
["Governance",{"$f":"Comparison!D6","v":0},{"$f":"(Comparison!E6-Comparison!D6)","v":0},{"$f":"IF(AND(B4 = 0,C4=0),0,1-C4-B4)","v":0},{"$f":"Comparison!F6","v":0},{"$f":"(Comparison!G6-Comparison!F6)","v":0},{"$f":"IF(AND(E4 = 0,F4=0),0,1-F4-E4)","v":0},{"$f":"Comparison!H6","v":0},{"$f":"(Comparison!I6-Comparison!H6)","v":0},{"$f":"IF(AND(H4 = 0,I4=0),0,1-I4-H4)","v":0},{"$f":"Comparison!J6","v":0},{"$f":"(Comparison!K6-Comparison!J6)","v":0},{"$f":"IF(AND(K4 = 0,L4=0),0,1-L4-K4)","v":0},{"$f":"Comparison!L6","v":0},{"$f":"(Comparison!M6-Comparison!L6)","v":0},{"$f":"IF(AND(N4 = 0,O4=0),0,1-O4-N4)","v":0}]
["IAM",{"$f":"Comparison!D7","v":0},{"$f":"(Comparison!E7-Comparison!D7)","v":0},{"$f":"IF(AND(B5 = 0,C5=0),0,1-C5-B5)","v":0},{"$f":"Comparison!F7","v":0},{"$f":"(Comparison!G7-Comparison!F7)","v":0},{"$f":"IF(AND(E5 = 0,F5=0),0,1-F5-E5)","v":0},{"$f":"Comparison!H7","v":0},{"$f":"(Comparison!I7-Comparison!H7)","v":0},{"$f":"IF(AND(H5 = 0,I5=0),0,1-I5-H5)","v":0},{"$f":"Comparison!J7","v":0},{"$f":"(Comparison!K7-Comparison!J7)","v":0},{"$f":"IF(AND(K5 = 0,L5=0),0,1-L5-K5)","v":0},{"$f":"Comparison!L7","v":0},{"$f":"(Comparison!M7-Comparison!L7)","v":0},{"$f":"IF(AND(N5 = 0,O5=0),0,1-O5-N5)","v":0}]
["IT Security",{"$f":"Comparison!D8","v":0},{"$f":"(Comparison!E8-Comparison!D8)","v":0},0,{"$f":"Comparison!F8","v":0},{"$f":"(Comparison!G8-Comparison!F8)","v":0},0,{"$f":"Comparison!H8","v":0},{"$f":"(Comparison!I8-Comparison!H8)","v":0},0,{"$f":"Comparison!J8","v":0},{"$f":"(Comparison!K8-Comparison!J8)","v":0},0,{"$f":"Comparison!L8","v":0},{"$f":"(Comparison!M8-Comparison!L8)","v":0},0]
["Operational Security",{"$f":"Comparison!D9","v":0},{"$f":"(Comparison!E9-Comparison!D9)","v":0},0,{"$f":"Comparison!F9","v":0},{"$f":"(Comparison!G9-Comparison!F9)","v":0},0,{"$f":"Comparison!H9","v":0},{"$f":"(Comparison!I9-Comparison!H9)","v":0},0,{"$f":"Comparison!J9","v":0},{"$f":"(Comparison!K9-Comparison!J9)","v":0},0,{"$f":"Comparison!L9","v":0},{"$f":"(Comparison!M9-Comparison!L9)","v":0},0]

{"sheet":"TempComparison1","index":7,"n_rows":6,"n_cols":14,"rows_kept":6,"cut":false,"hidden":true,"merged":[[0,3,0,5],[0,6,0,8],[0,11,0,13]]}
[null,null,null,"Compliance with cloud policy (not depending on data type)",null,null,"Compliance with cloud policy (depending on data type)",null,null,null,null,"Compliance with cloud policy (according to data type chosen by client)"]
[null,"Minimal weighted score","Maximal weighted score","Does comply","May comply","Does not comply","Does comply","May comply","Does not comply","Name of the cloud service",null,"Does comply","May comply","Does not comply"]
["Governance",null,null,null,null,null,null,null,null,null,"Governance",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!D3,TempComparison1!G3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!E3,TempComparison1!H3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!F3,TempComparison1!I3)","v":0}]
["IAM",null,null,null,null,null,null,null,null,null,"IAM",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!D4,TempComparison1!G4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!E4,TempComparison1!H4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!F4,TempComparison1!I4)","v":0}]
["IT Security",null,null,null,null,null,null,null,null,null,"IT Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!D5,TempComparison1!G5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!E5,TempComparison1!H5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!F5,TempComparison1!I5)","v":0}]
["Operational Security",null,null,null,null,null,null,null,null,null,"Operational Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!D6,TempComparison1!G6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!E6,TempComparison1!H6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison1!F6,TempComparison1!I6)","v":0}]

{"sheet":"TempComparison2","index":8,"n_rows":6,"n_cols":14,"rows_kept":6,"cut":false,"hidden":true,"merged":[[0,3,0,5],[0,6,0,8],[0,11,0,13]]}
[null,null,null,"Compliance with cloud policy (not depending on data type)",null,null,"Compliance with cloud policy (depending on data type)",null,null,null,null,"Compliance with cloud policy (according to data type chosen by client)"]
[null,"Minimal weighted score","Maximal weighted score","Does comply","May comply","Does not comply","Does comply","May comply","Does not comply","Name of the cloud service",null,"Does comply","May comply","Does not comply"]
["Governance",null,null,null,null,null,null,null,null,null,"Governance",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!D3,TempComparison2!G3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!E3,TempComparison2!H3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!F3,TempComparison2!I3)","v":0}]
["IAM",null,null,null,null,null,null,null,null,null,"IAM",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!D4,TempComparison2!G4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!E4,TempComparison2!H4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!F4,TempComparison2!I4)","v":0}]
["IT Security",null,null,null,null,null,null,null,null,null,"IT Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!D5,TempComparison2!G5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!E5,TempComparison2!H5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!F5,TempComparison2!I5)","v":0}]
["Operational Security",null,null,null,null,null,null,null,null,null,"Operational Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!D6,TempComparison2!G6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!E6,TempComparison2!H6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison2!F6,TempComparison2!I6)","v":0}]

{"sheet":"TempComparison3","index":9,"n_rows":6,"n_cols":14,"rows_kept":6,"cut":false,"hidden":true,"merged":[[0,3,0,5],[0,6,0,8],[0,11,0,13]]}
[null,null,null,"Compliance with cloud policy (not depending on data type)",null,null,"Compliance with cloud policy (depending on data type)",null,null,null,null,"Compliance with cloud policy (according to data type chosen by client)"]
[null,"Minimal weighted score","Maximal weighted score","Does comply","May comply","Does not comply","Does comply","May comply","Does not comply","Name of the cloud service",null,"Does comply","May comply","Does not comply"]
["Governance",null,null,null,null,null,null,null,null,null,"Governance",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!D3,TempComparison3!G3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!E3,TempComparison3!H3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!F3,TempComparison3!I3)","v":0}]
["IAM",null,null,null,null,null,null,null,null,null,"IAM",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!D4,TempComparison3!G4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!E4,TempComparison3!H4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!F4,TempComparison3!I4)","v":0}]
["IT Security",null,null,null,null,null,null,null,null,null,"IT Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!D5,TempComparison3!G5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!E5,TempComparison3!H5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!F5,TempComparison3!I5)","v":0}]
["Operational Security",null,null,null,null,null,null,null,null,null,"Operational Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!D6,TempComparison3!G6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!E6,TempComparison3!H6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison3!F6,TempComparison3!I6)","v":0}]

{"sheet":"TempComparison4","index":10,"n_rows":6,"n_cols":14,"rows_kept":6,"cut":false,"hidden":true,"merged":[[0,3,0,5],[0,6,0,8],[0,11,0,13]]}
[null,null,null,"Compliance with cloud policy (not depending on data type)",null,null,"Compliance with cloud policy (depending on data type)",null,null,null,null,"Compliance with cloud policy (according to data type chosen by client)"]
[null,"Minimal weighted score","Maximal weighted score","Does comply","May comply","Does not comply","Does comply","May comply","Does not comply","Name of the cloud service",null,"Does comply","May comply","Does not comply"]
["Governance",null,null,null,null,null,null,null,null,null,"Governance",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!D3,TempComparison4!G3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!E3,TempComparison4!H3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!F3,TempComparison4!I3)","v":0}]
["IAM",null,null,null,null,null,null,null,null,null,"IAM",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!D4,TempComparison4!G4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!E4,TempComparison4!H4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!F4,TempComparison4!I4)","v":0}]
["IT Security",null,null,null,null,null,null,null,null,null,"IT Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!D5,TempComparison4!G5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!E5,TempComparison4!H5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!F5,TempComparison4!I5)","v":0}]
["Operational Security",null,null,null,null,null,null,null,null,null,"Operational Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!D6,TempComparison4!G6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!E6,TempComparison4!H6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison4!F6,TempComparison4!I6)","v":0}]

{"sheet":"TempComparison5","index":11,"n_rows":6,"n_cols":14,"rows_kept":6,"cut":false,"hidden":true,"merged":[[0,3,0,5],[0,6,0,8],[0,11,0,13]]}
[null,null,null,"Compliance with cloud policy (not depending on data type)",null,null,"Compliance with cloud policy (depending on data type)",null,null,null,null,"Compliance with cloud policy (according to data type chosen by client)"]
[null,"Minimal weighted score","Maximal weighted score","Does comply","May comply","Does not comply","Does comply","May comply","Does not comply","Name of the cloud service",null,"Does comply","May comply","Does not comply"]
["Governance",null,null,null,null,null,null,null,null,null,"Governance",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!D3,TempComparison5!G3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!E3,TempComparison5!H3)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!F3,TempComparison5!I3)","v":0}]
["IAM",null,null,null,null,null,null,null,null,null,"IAM",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!D4,TempComparison5!G4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!E4,TempComparison5!H4)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!F4,TempComparison5!I4)","v":0}]
["IT Security",null,null,null,null,null,null,null,null,null,"IT Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!D5,TempComparison5!G5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!E5,TempComparison5!H5)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!F5,TempComparison5!I5)","v":0}]
["Operational Security",null,null,null,null,null,null,null,null,null,"Operational Security",{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!D6,TempComparison5!G6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!E6,TempComparison5!H6)","v":0},{"$f":"IF(OR(Assessment!$E$6=\"\",Assessment!$E$6=Condition!$B$2,Assessment!$E$6=Condition!$B$3,Assessment!$E$6=Condition!$B$4),TempComparison5!F6,TempComparison5!I6)","v":0}]