Electronic Commerce Services

Objective

Ensure the security of services used for electronic commerce. By default, ThingLogix does not enable electronic commerce, unless requested by the Customer. If requested by the Customer, the following policy and standards apply to anything enabled by ThingLogix for the Customer.

Policy

Electronic commerce services, including on-line payment transactions, shall be implemented in a manner that secures the information from unauthorized access and use and ensures the integrity of the data. ThingLogix should not build electronic commerce capabilities, but instead should always endeavor to integrate with established vendor electronic commerce platforms that comply with the below security standards.

Standard

A. Information involved in electronic commerce passing over public networks shall be protected from fraudulent activity, contract dispute, and unauthorized disclosure and modification.

B. Information involved in on-line transactions shall be protected to prevent incomplete transmission, mis-routing, unauthorized message alteration, disclosure, duplication, and/or replay.

C. The integrity of information being made available on a publicly available system shall be protected to prevent unauthorized modification.